/**
 * AES-256-GCM encryption for the SignalDB Tauri adapter.
 * Uses Web Crypto API with PBKDF2 key derivation (100k iterations).
 * On-disk format: `v{version}:{base64(salt || iv || ciphertext+authTag)}`
 */
import type { EncryptionOptions, EncryptionPair } from './types';
/**
 * Create an encryption/decryption pair using AES-256-GCM.
 *
 * @param passphrases - A passphrase string or a map of version numbers
 *   to passphrases for key rotation.
 * @param options - Optional configuration for iterations and active version.
 * @returns An object with `encrypt` and `decrypt` functions.
 */
export declare function createEncryption(passphrases: string | Record<number, string>, options?: EncryptionOptions): EncryptionPair;