It's not about the curves being cracked. https://auth0.com/blog/critical-vulnerability-in-json-web-en...