TEA/XTEA imp

[magnum]

In the system Im looking at, the assumption is that TEA is used as a KDF.  We call it a pwdgen
pwd = tea(Secret key,  unique bytes)

And the "Secret key" is a password chosen by a human? If not, there's nothing to attack: You obviously can't brute-force a 128-bit key.