> but you still couldn't plain brute force an encrypted message today The analysis you link to shows that it has about 76-bits of keystate based on the most g

> but you still couldn't plain brute force an encrypted message today The analysis you link to shows that it has about 76-bits of keystate based on the most generous analysis for the 3 of 5 rotor machines. This should be within the range of a motivated nation-state attacker using custom hardware to just outright brute force. Even if you don't know the plaintext, you can do a quasi plaintext attack where you just try every long enough word in the dictionary at every non-prohibited location and apply the classic attack-- and I expect this would still be much faster than a brute force search while only having extremely limited assumptions about the plaintext.