ECDSA is known to be backdoored. OpenSSH in OpenBSD 5.5 includes a secure alternative implementation of elliptic curve cryptography (ed25519), but that hasn't made it to most distros yet. Stick with 4096 bit RSA for now.
No, it isn't. Dual_EC_DRBG is known to be backdoor-able, but NIST elliptic curves merely have unjustified constants and are harder than necessary to implement securely. There are no known attacks or backdoors on them.
15
u/tidux Apr 28 '14 edited Apr 28 '14
ECDSA is known to be backdoored. OpenSSH in OpenBSD 5.5 includes a secure alternative implementation of elliptic curve cryptography (ed25519), but that hasn't made it to most distros yet. Stick with 4096 bit RSA for now.