If you want to be sure the NSA can’t break your crypto, use what they approve for classified data. If the NSA can break an algorithm, the assume someone else might be able to as well. (I assume the NSA has key escrow on all NSA-secured crypto, so they don’t need to be able to break it)
Type 1, suite B crypto. ECDH is on that list.
