-Now you can change the \e{Key comment} to something more meaningful
-than the default (which is based on the current date). e.g. add the
-name of the host you will use it for. When using multiple keys a
-meaningful comment may help you remember which passphrase to use! You
-should always enter a \e{Key passphrase} and \e{Confirm passphrase} to
-protect your keys.
-
-\# FIXME: Mention a good length for a passphrase. (I think Schneier
-\# said something about this on counterpane.com once.)
-
-\# In case people don't like the idea of exchanging a short password
-\# typed every time for a longer passphrase typed every time, link
-\# to the Pageant chapter.
-
-Finally save the key by pressing the \e{Save} button. Do not close the
+Now you can change the \q{Key comment} field to something more
+meaningful than the default (which is based on the current date).
+e.g. add the name of the host you will use it for. When using
+multiple keys a meaningful comment may help you remember which
+passphrase to use! You should always enter a passphrase in the
+\q{Key passphrase} and \q{Confirm passphrase} fields, to protect
+your keys.
+
+(Choosing a good passphrase is difficult. Just as you shouldn't use
+a dictionary word as a password because it's easy for an attacker to
+run through a whole dictionary, you should not use a song lyric,
+quotation or other well-known sentence as a passphrase. DiceWare
+(\W{http://www.diceware.com/}\cw{www.diceware.com}) recommends using
+at least five words each generated randomly by rolling five dice,
+which gives over 2^64 possible passphrases and is probably not a bad
+scheme. If you want your passphrase to make grammatical sense, this
+cuts down the possibilities a lot and you should use a longer one as
+a result.)
+
+Finally save the key by pressing the \q{Save} button. Do not close the