To summarize: short keys are easy to brute-force. Nothing new here.