There is no magic snake oil here, its a simple substitution cipher. Here is how the algorithm works: 1. An MD5 hash of the chart selection phrase is performed and the first 4 bytes of the hash is used as a random number seed to a Mersenne Twister pseudo-random number generator. 2. The password chart is then filled using sequences of 1 to 3 random upper and lower case letters and optionally numbers and punctuation by grabbing successive numbers generated from the Twister. The reason for the random sequence length is to make reversing the substitution cipher a bit harder. 3. The alphanumeric characters in the password is then converted using the chart.