[petre]

It implements EC with _fallback_ to RSA if EC is not available. Blame OpenSSL, I guess, because this relies on it. Even its CLI seems to be inspired by the atrocious OpenSSL CLI.

[cwyers]

Fallback in crypto is wrong. Either succeed or fail. I don't need to sit there guessing how secure my secure messenger is.