It is fairly well accepted that RSA is faster than most curve based things for signature verification and your sources support that? This is all in response to

It is fairly well accepted that RSA is faster than most curve based things for signature verification and your sources support that? This is all in response to another user who said: > There is a massive performance difference—not just size, but computation as well. ... and we don't know exactly what they meant by that, but I was pointing out that it was not that simple... Asymmetrical performance is normally not very important in most systems due to the use of symmetric stuff to do all the heavy lifting. The exception would be if you were doing some sort of forward secrecy scheme that involved forgetting the private key for each and every message. There the speed of ECDHE is helpful vs the slow key generation of RSA. However, the Signal Protocol shows us we can use a hash ratchet for such short cycle forward secrecy schemes so that key generation speed does not have to be a significant issue.