&gt; RSA security depends mostly on how you build your private keys and ECC security depends on what parameters and what curve was chosen.<p>No. RSA security depends on getting your parameters right and padding.<p><a href="http:&#x2F;&#x2F;www.cryptofails.com&#x2F;post&#x2F;70059600123&#x2F;saltstack-rsa-e-d-1" rel="nofollow">http:&#x2F;&#x2F;www.cryptofails.com&#x2F;post&#x2F;70059600123&#x2F;saltstack-rsa-e-...</a><p><a href="http:&#x2F;&#x2F;framework.zend.com&#x2F;security&#x2F;advisory&#x2F;ZF2015-10" rel="nofollow">http:&#x2F;&#x2F;framework.zend.com&#x2F;security&#x2F;advisory&#x2F;ZF2015-10</a><p>&gt; Russians cryptoexperts doesn&#x27;t fully trust DJB they found that at the last iteration of picking parameters by DJB for Curve25519 was a bit questionable.<p>Tell them to publish their findings and propose a better solution.<p>&gt; Changes was done for &quot;better performance&quot; but no one found what exactly was speeded up.<p>What &quot;changes&quot; exactly? The word &quot;changes&quot; implies there was an early draft with vastly different parameters.<p>&gt; I don&#x27;t know details, but when curve parameters was tried to be being compromised by NSA was almost always was about adding such &quot;performance optimizations&quot;.<p>If you don&#x27;t know the details, try doing some research. Knowledge is healthy.