https://xkcd.com/221/ wasn't intended to be used for cryptographic purposes.

Ouch. Related, https://www.explainxkcd.com/ has been taken down for now.