He got an additional four months for the failure to disclose the passphrase, on top of five years three months for Terrorism Act offences.
BBC also reported on a teenager getting 16 weeks (http://www.bbc.co.uk/news/uk-england-11479831).
In both cases it seems they were jailed purely for failure to disclose passwords and not in conjunction with any other offence.