base

const (
	// Computational security derived values
	ComputationalSecurityLog2Ceil  = 7
	ComputationalSecurityPow2Ceil  = 1 << ComputationalSecurityLog2Ceil
	ComputationalSecurityBytesCeil = 16 // ceil(ComputationalSecurityBits/8)

	// Statistical security derived values
	StatisticalSecurityLog2Ceil   = 7
	StatisticalSecurityPower2Ceil = 1 << StatisticalSecurityLog2Ceil
	StatisticalSecurityBytesCeil  = 10 // ceil(StatisticalSecurityBits/8)

	// Collision resistance derived values
	CollisionResistanceBytesCeil = 32 // ceil(CollisionResistance/8)
)

const (
	// ComputationalSecurityBits (λ) is the number of bits of computational security
	// we want to achieve in most of our cryptographic primitives.
	ComputationalSecurityBits = 128

	// StatisticalSecurityBits (λ_s) is the number of bits of statistical security
	// we want to achieve in most of our cryptographic primitives,
	// applicable mostly to soundness of interactive proofs.
	StatisticalSecurityBits = 80

	// IFCKeyLength is the key length (in bits) for integer factorization based cryptography
	// (e.g. RSA) to achieve λ-bits of security.
	// Values based on SP 800-57 Part 1 Rev. 5, Table 2.
	IFCKeyLength = 3072

	// CollisionResistance is the hash digest length to achieve λ-bits of
	// collision resistance (birthday paradox).
	CollisionResistance = 2 * ComputationalSecurityBits

	// Hash2CurveAppTag is the application tag for hash-to-curve operations.
	Hash2CurveAppTag = "bron_crypto_with-"
)

const IdentifiableAbortPartyIDTag = "identifiable_abort_party_id"