How secure is Twofish against brute force