You don't need the pass-phrase when you can get the encryption key itself. And there are several techniques to identify encryption keys and vastly reduce the se

You don't need the pass-phrase when you can get the encryption key itself. And there are several techniques to identify encryption keys and vastly reduce the search space for these, making it rather fast to extract. This paper describes (and implements) a few of these (Chapter "Key Identification"): http://cryptome.org/0003/RAMisKey.pdf http://cryptome.org/0003/RAMisKey.pdf