> The strength of this password scheme is that it works even assuming the attacker knows your dictionary. Indeed. Arguing about whether or not your dictionary

> The strength of this password scheme is that it works even assuming the attacker knows your dictionary. Indeed. Arguing about whether or not your dictionary is "unique" enough is a red herring. Whatever generator you use should accounts for the dictionary's word entropy, not for the theoretical per-byte entropy.