Let's ensure our key sizes calculations are correct. This doesn't actually change anything, just adds more safety checks. Inspired by #19203, but not a fix.
This allows us to later reuse the code to generate recovery keys for traditional LUKS volumes, too and share the code.