The passphrase is the weak point in PGP. I suppose some people treat it like a password, which is the wrong approach. It should be much longer and harder than a

The passphrase is the weak point in PGP. I suppose some people treat it like a password, which is the wrong approach. It should be much longer and harder than a normal password. Their analysis does demonstrate how cost-effective it has become to crack low-complexity passwords.