When I create a VeraCrypt file container using the GUI, it displays a warning whenever I type in a password under a given number of characters. I was wondering just how insecure, in practical terms, such a method of encryption really is.
To give a concrete example, suppose:
- I have a 4 GB VeraCrypt-generated container on a USB drive.
- The password for said container consists of 9 lower case letters, from the standard English 26 letter alphabet.
- Within said container are a dozen or so files, ranging from a few bytes to a few hundred megabytes in size.
- The USB drive in question falls into the hands of a party hostile to me.
- Other than the contents of the USB drive described above, this hostile party has no knowledge of how the container is encrypted.
How much trouble will that hostile party have in decrypting my container? Could an intelligent and motivated, but otherwise quite ordinary, programmer with a mid-range laptop do it, or would he have to call in the CIA, etc?