4 ms·

If I had the dump of the hashed password table (even salted), I'd start by trying all lowercase passwords to match the hashes.