token_length is the amount of bytes used in the unencrypted CSRF tokens.

This module does not provide an API to read a decrypted token (by turning it into a string, Cstruct.t or similar). This is to prevent leaking CSRF tokens.