WS-SecurityPolicy only supports RSA as asymmetric key algo for the moment. However, EC keys are becoming more and more used. The demonstrator at:

https://github.com/e-Contract/jaxws-demo

adds support for ECDSA at the WS-SecurityPolicy level.

Maybe it would be interesting to incorporate this within CXF/JBossWS?

Ideally the WS-SecurityPolicy namespace/element for ECDSA support gets standardized at OASIS.