more comments on BSI's recommendations. Especially on ephemeral keys.