Constant P256N_HALF 

pub const P256N_HALF: U256;

Half of the P256 curve order (n/2).

For signatures to be valid, the s value must be less than or equal to n/2 (low-s requirement). This prevents signature malleability where (r, s) and (r, n-s) are both valid signatures for the same message.