The slow key setup time (equivalent to the time it takes to encrypt a 4K block) is very long in comparison to most ciphers. This makes it difficult to mount dictionary attacks due to the extremely slow rate of testing hashes.
