worst case running time for the brute force algorithm