Well I wouldn't totally discard password fundamentals, because if you assume that an attacker knows the algorithm, then a single character password would not be secure, since you would just try all...