import { AesGcmKey } from './keys.js';
export interface Argon2idInput {
    passphrase: string;
    salt: Uint8Array;
    /** Memory cost in KiB. Default 64 MiB. */
    memKiB?: number;
    /** Time cost (iterations). Default 3. */
    iterations?: number;
    /** Parallelism / lanes. Default 1. */
    parallelism?: number;
}
/** Derive a 32-byte AES key from a passphrase via Argon2id (RFC 9106 defaults). */
export declare function deriveKeyArgon2id(input: Argon2idInput): Promise<AesGcmKey>;
export interface HkdfInput {
    ikm: Uint8Array;
    salt?: Uint8Array;
    info?: Uint8Array;
    /** Output length in bytes. Default 32. */
    length?: number;
}
/** HKDF-SHA256. Synchronous under the hood; promised for API uniformity. */
export declare function deriveKeyHkdf(input: HkdfInput): Promise<Uint8Array>;
//# sourceMappingURL=kdf.d.ts.map