/** * VaultKeyDerivation - Derives vault encryption keys from vault seed and master password * * Uses HKDF-SHA256 to derive a 32-byte AES-256 key from: * - IKM (Input Key Material): vault's BIP39 seed + master password * - Info: vault ID (for domain separation) * * Security: Each vault has its own independent BIP39 seed that can be * regenerated/cycled without affecting other vaults or the member's identity. * * Requirements: * - 5.1: Derives 32-byte AES-256 keys using HKDF-SHA256 * - 5.2: Combines vault seed and master password as input key material * - 5.3: Uses vault ID as the info parameter for domain separation */ export declare class VaultKeyDerivation { /** * Derive a vault encryption key * @param vaultSeed - Vault's own BIP39 seed (64 bytes) - independent of member * @param masterPassword - User's master password * @param vaultId - Unique vault identifier (used for domain separation) * @returns 32-byte AES-256 key */ static deriveVaultKey(vaultSeed: Uint8Array, masterPassword: string, vaultId: string): Uint8Array; } //# sourceMappingURL=vaultKeyDerivation.d.ts.map