alphagov/signonotron2 — pull request #122 by matthewford (2013-12-05 15:15:20+00:00)
Title: Switch from using passphrase_entropy to a ruby port of zxcvbn.

Uses `zxcvbn-ruby` which in initial tests is at least 30 time faster than `passphrase_entropy`.
The `passphrase_entropy` implementation seems rather basic. It also has the added security of scoring 0 to known 85094 common passwords.

More info: https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/