Elliptic curves or groups chosen to make verifiable delay functions efficient and secure, balancing hardware resistance and verification speed.