Hi Mark,

You're correct - there is a bug in the seen entropy calculation that over-estimates the entropy for randomised case.

This bug exists in the older XKPasswd 2.* perl module, but has been fixed in the recent Crypt::HSXKPasswd 3.* version.

The web tool hasn't been migrated to the new library yet, so it still has the bug. My plan is to update the web tool when I get some time off work during the holidays.