Perhaps some sort of correlation to password strength for dictionary type attacks