Comment Comment by blake8086 Doesn't this mean that for a sufficiently short secret, someone could run an offline attack to guess it? parent blake8086 13 years ago