jroes/passwordy — pull request #2 by jaseg (2012-08-13 12:25:09+00:00)
Title: Prevented the sha2-block-boundary attack described in

http://news.ycombinator.com/item?id=4374888 by xoring the three
variables of the password instead of concatenating them before finally
hashing them so the result of that operation fits inside one
sha-512-block.

Also, the final password now is a shorter base-64 string instead of the hex string used previously.