A cryptographic security parameter is an integer indexing a family of cryptographic protocols or algorithms. It controls the scale at which efficiency and security guarantees are stated. Theoretical algorithms are often given , a string of ones, so polynomial time in that input length means polynomial time in .[ref]
A typical asymptotic guarantee requires a cryptographically negligible probability: for every fixed , the relevant probability eventually falls below . An exponential such as has that property; does not, because it fails the requirement for .
An original idealized guessing example separates a parameter from a concrete security claim. If a secret is uniform among possible values and no other information about it is supplied, one fixed guess succeeds with probability . Checking distinct guesses covers at most a fraction
of those possibilities. This is a counting argument under the stated uniform-secret model, not a guarantee for every scheme described as having a128-bit key.
The parameter's numerical value, key length, algorithmic cost and actual adversary advantage are related through the particular construction. Naming the parameter alone does not establish a concrete work estimate or compensate for a flaw in the protocol.