How Advanced Is the NSA's Cryptanalysis, and Can We Resist It?
Schneier has been giving some pretty weird advice lately. This is probably the weirdest thing I've seen from him:"Prefer conventional discrete-log-based systems over elliptic-curve systems; the latter have constants that the NSA influences when they can."There are plenty of ECC systems that have virtually no chance of NSA influence. Curve25519/Ed25519 come to mind.