I really appreciate the level-headed discussion in this thread so far, especially the comment I&#x27;m replying to.<p>It&#x27;s a stark contrast to the CFRG mailing list. (At least, so far, no one has tried to derail discussion here with &quot;hey check out my custom cipher it&#x27;s soooo secure but you need to compress the data before encrypting it or else you can observe a repeated structure out of it&quot;.)<p>I like 25519&#x27;s school of thought. If you use the smallest possible value for a given performance&#x2F;security goal, there&#x27;s less room for conspiracy theory (provided the person making the theory understands what&#x27;s even going on).