Is 40 bits too little?

Yes, in just a trillion iterations you can test all possible keys. But if for testing *each* key you will have to figure out whether a text /signal you produced represents sensible speech... - it may be prohibitively expensive. Alex Chislenko.