/**
 * AES encryption primitives for in-house wallet groups.
 *
 * We use crypto-js AES because:
 *   1. It's pure JS — no native binaries — so the build stays portable
 *   2. `CryptoJS.AES.encrypt(text, passphrase)` bakes salt + IV into the
 *      ciphertext output, so we don't have to manage those ourselves
 *
 * These in-house keys are short-lived sniper/volume wallets; the threat
 * model is "local disk + master password, encrypted at rest".
 *
 * Note: this format is NOT wire-compatible with ForgeX. The password-check
 * marker is "ALMM_PASSWORD_OK" (kept for backward compat; ForgeX used "FORGEX_PASSWORD_OK").
 */
/** Encrypt a value with AES using the master password */
export declare function encrypt(plaintext: string, password: string): string;
/**
 * Decrypt an AES ciphertext with the master password.
 * Throws if decryption yields an empty string (wrong password or corrupt data).
 */
export declare function decrypt(ciphertext: string, password: string): string;
/** Generate a password check string for vault verification */
export declare function generatePasswordCheck(password: string): string;
/** Verify a password against a stored check string */
export declare function verifyPassword(password: string, check: string): boolean;
//# sourceMappingURL=encrypt.d.ts.map