This might not contribute much to the discussion, but I just want to add:<p>I for one welcome the coming arrival of ECDH over curve25519 in TLS everywhere.<p>(And I <i>really</i> hope that comes to pass.)