One reason I like ECC (Curve25519 in particular) is speed and size of generated keys and signatures. It is a lot easier to compose crypto with business logic wh

One reason I like ECC (Curve25519 in particular) is speed and size of generated keys and signatures. It is a lot easier to compose crypto with business logic when you can basically assume instantaneous key gen (RSA takes a non-deterministic amount of ~seconds) as well as 32-byte signatures that are practical even for short messages (as opposed to 256-512 bytes).