export type KeyPairPem = {
    publicKeyPem: string;
    privateKeyPem: string;
};
export declare function generateEd25519KeyPair(): KeyPairPem;
/**
 * Stable identifier for a public key: the algorithm tag plus a truncated
 * SHA-256 fingerprint of its PEM. The fingerprint length is a deliberate,
 * shared constant (KEY_ID_HEX_LENGTH) — 64 bits is ample to identify an
 * enrolled key while keeping ids short.
 */
export declare function keyIdFromPublicPem(publicKeyPem: string): string;
export declare function signData(privateKeyPem: string, data: string | Buffer): string;
export declare function verifyData(publicKeyPem: string, data: string | Buffer, signatureB64: string): boolean;