> We know the NSA has found weaknesses in certain implementations of elliptic-curve based cryptography in the past No, we don't. Even djb wants people to use

> We know the NSA has found weaknesses in certain implementations of elliptic-curve based cryptography in the past No, we don't. Even djb wants people to use ECC. Note that End-To-End supports not only NIST's curves but also djb's.