pub const SECRET_BYTES: usize = 20;
Bytes of secret material. RFC 4226 requires at least 128 bits and recommends 160 — which is also the SHA-1 block output, so nothing is truncated.