> Prefer conventional discrete-log-based systems over elliptic-curve systems; the latter have constants that the NSA influences when they can. When I read this

> Prefer conventional discrete-log-based systems over elliptic-curve systems; the latter have constants that the NSA influences when they can. When I read this, I realized that I can't recall Schneier ever saying anything positive about switching to ECC. (Although that's more or less off the top of my head.) Along those lines, he had a recent post[1] regarding the Blackhat Cryptopocalypse presentation (that you helped with ^D^D^D^D^D^D^D^D^D^D^D were credited on) where he spoke optimistically about the ability of classic number-theoretic ciphers to choose key lengths that out-pace mathematical breakthroughs. So, it doesn't surprise me to hear him say that. [1]: https://www.schneier.com/blog/archives/2013/08/the_cryptopocal.html https://www.schneier.com/blog/archives/2013/08/the_cryptopoc...