> Why not ssh-ed25519? > [...] but support mostly boils down to NIST compromised curves on the majority of applications. I am doing a lot of embedded stuff, a

> Why not ssh-ed25519? > [...] but support mostly boils down to NIST compromised curves on the majority of applications. I am doing a lot of embedded stuff, and usually all that's supported is RSA ... and NIST curves when it comes to ECC. And I like to keep my key count at 1. Ditching RSA for ECC was a huge step already in that regard.