He&#x27;s not claiming that you can brute-force the encryption key -- he&#x27;s proposing another way to brute-force the PIN itself that won&#x27;t trigger exponential timeouts or auto-wipe of the device. I don&#x27;t know if he&#x27;s right or wrong, but let&#x27;s at least make sure we&#x27;re clear what his argument is first.