Comment by Strilanc

Giving the attacker two ciphertexts, where their plaintexts are related by a simple function, sounds like the sort of thing that breaks cryptosystems.

So I hope they're canonicalizing the password casing instead of storing the hash of both possibilities.