My two-rule algorithm actually broke down at work, where they now require periodic changes and won't let you use the past 7 or so passwords. But I fixed 'em, I did, I developed a third rule for these situations. *\;-)
We had to change passwords regularly where I worked, too. I went through all the 8-letter states, 8-letter vegetables, 8-letter country singers, etc.