[KongchangAI]
Unverified50% confidenceOpinionExact time

Filippo Valsorda now personally recommends NIST ECC over Curve25519/Ed25519/X25519, for reasons including P-256 being everywhere, preferring to concentrate effort on one well-implemented curve, and ML-DSA-44 being a better choice for new signatures.

1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/18/2026
First Seen
Valid until: 1/16/2027

Sources

The NIST P-256 Backdoor Mystery Is Settled: The Seeds Were Just 1997 Timestamps

Related Entities

Filippo ValsordapersonP-256conceptML-DSA-44concept

Related Claims

UnverifiedRank-256 is higher than the commonly used rank-8/16, meaning more trainable parameters and a greater degree of stylistic modification to the original model.56% similar

Cite This Claim

Stable URI
https://kongchang.com/claim/1061283
API
curl https://kongchang.com/api/v1/knowledge/claims/1061283
MCP
get_claim(id=1061283)