I remember watching a presentation by Tanja Lange and djb that explained that kind of thing very well. It starts with easy to visualize examples using "clock crypto" and then transitions to real ECC curves.

https://media.ccc.de/v/31c3_-_6369_-_en_-_saal_1_-_201412272...