Thanks! That's a solid method and definitely a good fallback when openssl or base64 are available. passgen is more of a "C-first, offline, no-dependencies" too

Thanks! That's a solid method and definitely a good fallback when openssl or base64 are available. passgen is more of a "C-first, offline, no-dependencies" tool — aimed at setups where even those might be unavailable or untrusted. But I’ll definitely keep developing it further, and may add some of the ideas you mentioned. Appreciate the input!