Yeah I never bought into the EC thing much either.
It's supposed to be safer against quantum but it's also a lot less proven.
It's supposed to be safer against quantum but it's also a lot less proven.
The main disadvantage of RSA is the structure of finite fields, which allows specialized solutions to factoring (number field sieve). We do not know similar structures for elliptic curves, so for those we only have general attacks, thus allowing shorter key lengths.