The set of all possible errors std.crypto.ff functions can return.