Is using the CLI command gen keys new
to generate a cryptographically secure key-pair the most secure method for cold storage eg. paper wallet? Which signature algorithm (ed25519, secp256k1, p256) should be used and what are the benefits/drawbacks for this purpose?
Or is storing the XTZ on a Ledger hardware wallet the best/secure option? Are there other alternatives available for cold storage?