Oh, if the AES128 cipher operations uses a pre-shared key instead of a DH key exchange, then a pre-shared key of 63 characters of an "alphabet" of [0-9][a-z][A-Z][the other printable chars] is way out of reach.
Twelve (12) or fewer characters is vulnerable. Sixteen is considered "safe" minimum at today's processing power.
BTW, this is true for all the WPA and WPA2 wireless access points out there.
So amp-up the "password"/"key" lengths.
https://www.grc.com/passwords.htm is my favorite random key generator site. Notice it's SSL only access.
/S