import type { webcrypto } from "node:crypto";
export type CryptoKey = webcrypto.CryptoKey;
export type CryptoKeyPair = webcrypto.CryptoKeyPair;
export interface EncryptedKeyEntry {
    recipientType: "sender" | "receiver";
    encryptedKey: string;
}
export declare const generateAesKey: () => Promise<CryptoKey>;
export declare const generateRsaKeyPair: () => Promise<CryptoKeyPair>;
export declare const exportRsaPublicKey: (publicKey: CryptoKey) => Promise<string>;
export declare const importRsaPublicKey: (publicKeyB64: string) => Promise<CryptoKey>;
/** Encrypts bytes; returns IV (12 bytes) || ciphertext+tag — same layout the web app writes. */
export declare const encryptBytes: (data: Uint8Array, key: CryptoKey) => Promise<Uint8Array>;
/** Decrypts IV-prefixed payloads produced by encryptBytes / the web app. */
export declare const decryptBytes: (payload: Uint8Array, key: CryptoKey) => Promise<Uint8Array>;
export declare const encryptSymmetricKey: (symmetricKey: CryptoKey, rsaPublicKey: CryptoKey) => Promise<string>;
export declare const decryptSymmetricKey: (encryptedKeyB64: string, rsaPrivateKey: CryptoKey) => Promise<CryptoKey>;
export declare const createBidirectionalEncryptedKeys: (symmetricKey: CryptoKey, senderPublicKey: CryptoKey, receiverPublicKey: CryptoKey) => Promise<EncryptedKeyEntry[]>;
export declare const decryptUserSymmetricKey: (entries: EncryptedKeyEntry[], privateKey: CryptoKey, isSender: boolean) => Promise<CryptoKey>;
export declare const randomHex: (byteLength: number) => string;