import type { EncryptionProvider, HealthCheck } from '../interfaces/core.js';
import type { DecryptionRequest, EncryptionRequest, EncryptionResult, KeyMetadata, SignatureRequest, SignatureResult, VerificationRequest } from '../types.js';
export type HSMProviderConfig = {
    pkcs11LibPath: string;
    slotId: number;
    pin: string;
    label?: string;
};
export type HSMKeyInfo = {
    objectHandle: number;
    label: string;
    keyType: string;
    keySizeInBits: number;
};
/**
 * Hardware Security Module (HSM) provider for FIPS 140-3 compliance
 * Phase 2: FIPS 140-3 HSM integration
 */
export declare class HSMProvider implements EncryptionProvider {
    private readonly config;
    readonly name = "hsm";
    private initialized;
    private static readonly errorMsgNotInitialized;
    private static readonly errorMsgNotImplemented;
    constructor(config: HSMProviderConfig);
    /**
     * Initialize HSM connection (requires pkcs11 library)
     */
    initialize(): Promise<void>;
    /**
     * Check if HSM is initialized
     */
    isInitialized(): boolean;
    /**
     * Verify HSM FIPS mode
     */
    verifyFIPSMode(): Promise<boolean>;
    /**
     * List available keys in HSM
     */
    listKeys(): Promise<HSMKeyInfo[]>;
    /**
     * Encrypt data (delegated to HSM)
     */
    encrypt(_request: EncryptionRequest): Promise<EncryptionResult>;
    /**
     * Decrypt data (delegated to HSM)
     */
    decrypt(_request: DecryptionRequest): Promise<Uint8Array>;
    /**
     * Sign data (delegated to HSM)
     */
    sign(_request: SignatureRequest): Promise<SignatureResult>;
    /**
     * Verify signature (delegated to HSM)
     */
    verify(_request: VerificationRequest): Promise<boolean>;
    /**
     * Generate key in HSM
     */
    generateKey(): Promise<KeyMetadata>;
    /**
     * Rotate key in HSM
     */
    rotateKey(_keyId: string): Promise<KeyMetadata>;
    /**
     * Get key metadata from HSM
     */
    getKeyMetadata(_keyId: string): Promise<KeyMetadata>;
    /**
     * Health check for HSM
     */
    healthCheck(): Promise<HealthCheck>;
    /**
     * Cleanup HSM resources
     */
    cleanup(): Promise<void>;
}
//# sourceMappingURL=hsm.d.ts.map