SecurityLengths

The five finite-key lengths this layer exports, and the shapes that differ

13/13 passed in 1ms

Test	What it does	Result
test_component_refused	BB84, MDI and CV refuse keylength, each naming the component route that already exports a length.	✅ pass
test_estimators_refused	sample_width and residual_entropy refuse every family but six-state by name.	✅ pass
test_estimators_single	The entropy the six-state length is taken at sits below sixstate_bound, and the sample width falls with the sample and rises as eps tightens.	✅ pass
test_observations_named	An incomplete observation set and one carrying another family's count are both refused, naming the shape the family reads.	✅ pass
test_pair_route	BBM92 reads eps_pa alone, Eq. (58) entering the length as 2log2(2eps_pa), so the composed secrecy parameter gives a different length.	✅ pass
test_pairing_route	keylength for mode pairing is the engine call at the undivided eps_sec, in bits per sifted Z-pair.	✅ pass
test_rrdps_route	keylength for RRDPS is the engine call, reporting back the target the ledger was allocated from.	✅ pass
test_rrdps_shapes	RRDPS's block shape and its certified-threshold shape return one length on one block, stating different units.	✅ pass
test_sarg_misalignment	The SARG04 length falls with misalignment over e_det 0.002 to 0.01 and clamps to zero at 0.015.	✅ pass
test_sarg_route	SARG04's length is the sarg_eps, sarg_counts, sarg_errors and sarg_length chain, and the certified shape fed its own counts agrees.	✅ pass
test_sixstate_nesting	Six-state nests eps_ec INSIDE eps, so the route hands the engine the outer term and not Ledger.secrecy.	✅ pass
test_vacuum_refused	deviation and conversion refuse every family but COW' by name.	✅ pass
test_vacuum_route	COW' reaches a length through six Kato deviations, the interval and conversion estimators, and sdp_length at the recomposed total.	✅ pass