This is tricky ... AFAIK ECDSA signing/verifying is slower than RSA signing/verifying. I should make more clear that I am talking about key generation time here (which is an essential factor in ephemeral systems).

I think that key generation for ECDH is faster than for DH, but I think the easiest way is to just delete this sentence :smirk: