I thought md5 were 32 characters. But you're right every md5 hash would be in that space, so there must be collisions.