/**
 * Rubric Protocol — Local ML-DSA-65 Signing
 * Uses @noble/post-quantum (NIST FIPS 204)
 * Handles key generation, signing, verification, and filesystem persistence.
 */
export interface LocalKeyPair {
    publicKey: Uint8Array;
    secretKey: Uint8Array;
    publicKeyHex: string;
    created: string;
}
export interface SignedPayload {
    payload: Record<string, unknown>;
    signature: string;
    publicKey: string;
    signedAt: string;
    algorithm: 'ML-DSA-65';
}
/**
 * Generate a fresh ML-DSA-65 keypair from a 32-byte random seed.
 */
export declare function generateKeyPair(): LocalKeyPair;
/**
 * Sign an arbitrary payload object with a local secret key.
 * Canonical JSON serialization ensures deterministic signing.
 */
export declare function signPayload(payload: Record<string, unknown>, secretKey: Uint8Array, publicKey: Uint8Array): SignedPayload;
/**
 * Verify a signed payload locally (for testing / offline verification).
 */
export declare function verifySignedPayload(signed: SignedPayload): boolean;
export declare function saveKeyPair(kp: LocalKeyPair, filePath: string, passphrase?: string): void;
export declare function loadKeyPair(filePath: string, passphrase?: string): LocalKeyPair;
export declare function loadOrCreateKeyPair(filePath: string, passphrase?: string): LocalKeyPair;
//# sourceMappingURL=signing.d.ts.map