Most modern security protocols use an ECC cipher by default

The security of ECC relies on solving the elliptic curve discrete log problem (ECDLP), which should be hard

According to the NSA, ECC ciphers are more resistant to quantum computer attacks than RSA

ECC keys are significantly shorter than RSA keys for the same level of security