Classifier-independent Lower-Bounds for Adversarial Robustness