| ALG_AES_256_GCM | Whole-object AES-256-GCM, one AEAD operation over the entire plaintext. Not seekable. |
| ALG_CHUNKED_AES_256_GCM_STREAM | Chunked AES-256-GCM with STREAM (per-chunk nonce, positional AAD binding). Seekable. |
| BASE_NONCE_SIZE | Random, per-object portion of the chunked scheme’s nonce. |
| DEFAULT_CHUNK_SIZE | - |
| KEY_SIZE | Content encryption key size (AES-256). |
| MAX_AES_GCM_PLAINTEXT_SIZE | Largest plaintext the one-shot AES-256-GCM scheme accepts. |
| MAX_CHUNK_COUNT | Largest chunk count this library encodes or decodes: 2^24. The wire format can represent up to 2^32 - 1, which nothing here produces or accepts. |
| MAX_CHUNK_SIZE | - |
| MAX_ENCODED_OBJECT_SIZE | Largest complete encoded chunked object: envelope plus detached ciphertext, every 16-byte chunk tag included. |
| MIN_CHUNK_SIZE | - |
| NONCE_SIZE | Full AEAD nonce size (GCM standard). |
| TAG_SIZE | GCM authentication tag size. |