Statistics for METHODOLOGY FOR ESTIMATING PASSWORD STRENGTH AGAINST GUESSING ATTACKS