The design of Curve25519 and its analogs has an extremely limited design space. If there is an engineered weakness in Curve25519 than it is likely that any curve that we could select would be likely to have the same unknown weakness. In the literature this is called "rigid" design.
That's what I did, Bernstein could be compromised.
> He's not Satoshi.
I sat on a panel with him at an Arm conference, he's a great guy and easy to talk to and doesn't write anything like Satoshi: but I could care less if he is Satoshi. FWIW, I, too, think crypto currency is a huge scam.