[exabrial]

At minimum, for asymmetric, at the time of the writing:

* ECDSA with secp-256 or ed25519 curves

* RSA >= 2048 bits. Performance takes a steep dive at 4096bits unfortunately

What people don't understand is that your implementation needs to be selected against your attack surface. If your attack surface includes hardening against side channels, your implementation selection needs to take that into account.

[regecks]

I don't think curve25519 is used in any ECDSA implementations. ed25519 is part of EdDSA.

[exabrial]

You're correct. ed25519 is a separate scheme.