Is 40 bits too little?