/**
 * Keyring Encryption Service
 *
 * Single Responsibility: Encrypt/decrypt the password keyring using a master password
 * Uses Web Crypto API for secure encryption
 *
 * Algorithm: AES-256-GCM with PBKDF2 key derivation
 * - PBKDF2 iterations: 310,000 (OWASP 2023 recommendation)
 * - Salt: 32 bytes (256 bits)
 * - IV: 12 bytes (96 bits) for GCM
 */
export declare class KeyringEncryptionService {
    private readonly PBKDF2_ITERATIONS;
    private readonly SALT_LENGTH;
    private readonly IV_LENGTH;
    /**
     * Encrypt data with master password
     * Returns encrypted data with salt and IV prepended
     */
    encrypt(plaintext: string, masterPassword: string): Promise<string>;
    /**
     * Decrypt data with master password
     */
    decrypt(encryptedData: string, masterPassword: string): Promise<string>;
    /**
     * Verify if master password is correct by attempting to decrypt
     */
    verifyMasterPassword(encryptedData: string, masterPassword: string): Promise<boolean>;
    /**
     * Derive encryption key from master password using PBKDF2
     */
    private deriveKey;
    /**
     * Convert ArrayBuffer to Base64
     */
    private arrayBufferToBase64;
    /**
     * Convert Base64 to ArrayBuffer
     */
    private base64ToArrayBuffer;
}
//# sourceMappingURL=keyring-encryption.service.d.ts.map