Klaus Zimmermann's Corner

Recommendation of algorithm for a new PGP key?

I've noticed that gpg (at least the version here in Artix) has been "recommending" other algorithms than RSA to create your new keys by default - namely the Elliptic Curve ones.

As a non-cryptographer, I see no particular advantage of using these over the classic RSA algorithm except that apparently ECC makes much smaller keys for the same equivalent cryptographic strength. But again, I'm no cryptographer and can't see much more advantage beyond that. Is ECC faster? More convenient for some reason?

I created an ECC keypair just for a change and to try it out and don't see much difference from RSA. Messages are slightly smaller, but not significantly so, and I have not benchmarked anything seriously yet. What are some reasons why I would choose ECC over RSA or otherwise?