So this comes from the professional rumor-mill, and I'm wondering if anyone might either debunk or shed light on this.
My understanding is ECC is generally now preferred over RSA simply due to how much more efficiently it operates. After a 2048 key length, RSA simply doesn't return as much value for a longer key length. whereas ECC can offer greater levels of protection for much less processing overhead.
Is there discussion about a more efficient/powerful alternative to ECC which NIST is preparing to favor (if not already) ahead of ECC? And if so, what might that be?