Problem becomes harder. The (comparatively weak) passcode gets run through a large number of hashing rounds, which takes about five seconds of real time to comp

Problem becomes harder. The (comparatively weak) passcode gets run through a large number of hashing rounds, which takes about five seconds of real time to complete. The results of that hash are the actual key to a very strong algorithm. It makes more sense to try brute forcing the hash, even with the delay time.