Add scheme parameters corresponding to 128 bits of security

[fjarri]

See Section C.1 in the paper. Currently we have 112-bit ones implemented. The 128 bit parameters require a 12288-bit Uint, which doesn't have a predefined alias and all the corresponding impls (like Concat). We can implement those manually, or perhaps use BoxedUint?.