For brainwallet, it just uses sha256(your passphrases) as the private key.
So every adress contains 2^96 public keys and also 2^96 private keys?
IIRC, we don't have a collision found yet for sha256 or RIPEMD160, so we don't know how it is distributed.
PS. Danny, please correct me if I am wrong.
