2017.09.14 18:54:33 (908373413336633344) from Daniel J. Bernstein:
The simplicity of Curve25519 is a big part of what has enabled formally verified (HACL*) X25519 software in Firefox: https://blog.mozilla.org/security/2017/09/13/verified-cryptography-firefox-57/