What is the main practical advantage of elliptic curve cryptography (ECC) over RSA, at equivalent security?