I'm not sure how that works, but according to Bear's post:
It's well over 20 characters (random)
So if it's a dictionary and/or brute-force cracker, it will take 5 years....

The only hope is that it has an exploit of some kind that gets to the password somehow.