> The passphrase can be brute-forced significantly more easily than breaking the encryption itself. Doesn't brute forcing this depend on the strength of the pa

> The passphrase can be brute-forced significantly more easily than breaking the encryption itself. Doesn't brute forcing this depend on the strength of the passphrase? For large enough N, if neither can be done in the next N years, does it really matter if it's significantly easier? Isn't there a non-negligible likelihood that in the next N years we'll figure out ways to break stronger forms of encryption but we won't figure out how to brute force strong passphrases efficiently?