Hi Andreas, > actually X25519 DH group 31 has a security strength of 128 bits, similar > to ECP-256, although the Curve25519 characteristics are much better > than those of the ECP-256 NIST curve. thanks for the correction.