> Unfortunately I think it's a little low-level for most implementers, who just want to know which library to use and are scared of things like cofactors and pr

> Unfortunately I think it's a little low-level for most implementers, who just want to know which library to use and are scared of things like cofactors and prime-order groups. Ah, yeah, totally fair. I have other blog posts that tackle high-level things. ;) > Also: it's 2022 and has an ECC side-channel attack ever been used in the wild? Do you mean by criminal hacking groups? If not, the best example I know of is: https://auth0.com/blog/critical-vulnerability-in-json-web-encryption/ https://auth0.com/blog/critical-vulnerability-in-json-web-en... If you do mean by criminals, I'm not in the malware/cybercrime part of the security industry, so I have no idea.