NSA specifies elliptic-curve crypto for security applications