This is unrelated to the above comment, but I figured I'd ask while we're here. You state at the end of your blog post on this topic that you'd now probably recommend the NIST curves over Curve25519. Why is that?
I'm guessing affinity towards prime curves vs cofactor.
I'm guessing affinity towards prime curves vs cofactor.