I'm deathly afraid of keyloggers [hardware and software based] so if you are doing something really important, hardware based authentication is best. Use a LOK-IT drive ON TOP of TrueCrypt:
http://www.lok-it.net/
Make sure you use a numerical PIN for the drive and use a alpha or alphanumeric password for the partition encryption [I don't even like using container encryption as temp files may be left over on the unencrypted partition.]
With this, if one method of crypto is cracked or key logged, the other *should* protect you.
ViaSat, a US Government Contractor manufactures KG-200 and KG-201, developed by the NSA, they use a hardware electronic memory key [something you have] with a numeric PIN [something you know]. More info here:
http://www.viasat.com/secure-DAR
That way if your shot and killed or an "agency" intercepts or obtains your drive and KEY, they still need the PIN. KG-201's are protected against hardware tampering and bruteforce attack.