/**
 * Branded 32-byte AES-256 key. Construct via {@link generateAesGcmKey},
 * {@link deriveKeyArgon2id} or {@link deriveKeyHkdf}.
 */
export type AesGcmKey = Uint8Array & {
    readonly __brand: 'AesGcmKey';
};
export declare function brandKey(bytes: Uint8Array): AesGcmKey;
/** Generate a fresh 256-bit AES-GCM key from the platform CSPRNG. */
export declare function generateAesGcmKey(): AesGcmKey;
//# sourceMappingURL=keys.d.ts.map