TBB 3.5's OpenSSL was not built with NIST P224 and P256 curve support
When launching a freshly unzipped TBB-3.5-rc1 (only build 1, I think), and configuring a bridge in the TorLauncher first run dialogue, I get the following log message from tor:
Dec 13 00:42:38.000 [notice] We were built to run on a 64-bit CPU, with OpenSSL
1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated
support for the NIST P-224 and P-256 groups. Building openssl with such support
(using the enable-ec_nistp_64_gcc_128 option when configuring it) would make
ECDH much faster.