considering that the entropy of written english is less than 1.1 bits per character, passphrases can be relatively weak. nist has estimated that the 23-character passphrase "iamthecapitanofthepina4" contains a 45-bit strength. the equation employed here is: