/** @typedef {import('./encryptions.js').ContentEncryptionDescriptor} EncDescriptor */
/**
 * @typedef {Object} SealedContent
 * @property {Buffer} iv
 * @property {Buffer} ciphertext
 * @property {Buffer} tag
 */
/**
 * Encrypt plaintext under a CEK.
 *
 * @param {EncDescriptor} enc
 * @param {Buffer} cek
 * @param {Buffer} plaintext
 * @param {Buffer} aad
 * @returns {SealedContent}
 */
export function contentEncrypt(enc: EncDescriptor, cek: Buffer, plaintext: Buffer, aad: Buffer): SealedContent;
/**
 * Decrypt and authenticate ciphertext under a CEK. Any integrity failure
 * surfaces as {@link ErrorCode.DECRYPTION_FAILED}.
 *
 * @param {EncDescriptor} enc
 * @param {Buffer} cek
 * @param {Buffer} iv
 * @param {Buffer} ciphertext
 * @param {Buffer} tag
 * @param {Buffer} aad
 * @returns {Buffer} The recovered plaintext.
 */
export function contentDecrypt(enc: EncDescriptor, cek: Buffer, iv: Buffer, ciphertext: Buffer, tag: Buffer, aad: Buffer): Buffer;
export type EncDescriptor = import("./encryptions.js").ContentEncryptionDescriptor;
export type SealedContent = {
    iv: Buffer;
    ciphertext: Buffer;
    tag: Buffer;
};