256-bit number, 32 bytes. Appears in the handshake and in key exchange.
A built-in TL type: it has no constructors and is serialised directly. Details are in the protocol description.