I wonder if anything is known about the choice of base point, which in compressed form is: G = 02 79BE667E F9DCBBAC 55A06295 CE870B07 029BFCDB 2DCE28D9 59F

I wonder if anything is known about the choice of base point, which in compressed form is: G = 02 79BE667E F9DCBBAC 55A06295 CE870B07 029BFCDB 2DCE28D9 59F2815B 16F81798 Is this choice beneficial for efficiency? If the choice of G doesn't matter, why not choose it as having the smallest possible x coordinate? Many applications use a second generator H, which must be an unknown multiple of G. This is achieved by defining it as essentially SHA256(G).