Our PGP keys were generated and are held on FIPS 140-1 compliant tokens and we use irritatingly long passwords.