@lcamtuf @sophieschmieg If someone brute-forcing a key does not know the intended length they will first try the shortest keys as these can be done very quickly.

If they do know the keylengh but have reason to believe (as we all do now) that small numbers might be padded with leading zeros, that is also trivial to check as only one more step per try (add the leading zeroes) is needed