11-19-2017, 03:30 AM
I would expect that a general hybrid attack (that tries a variety of number combinations, not just Fibonacci) would almost always be the way to go here. Unless maybe it was A) a very slow hash, and B) a user population known to be math geeks.
~