export declare class EncryptionService {
    /**
     * Derives a key from the encryption token using PBKDF2
     */
    private static deriveKey;
    /**
     * Encrypts data using AES-256-GCM
     * @param data - Plain text data to encrypt
     * @param token - Encryption token/password
     * @returns Base64 encoded string containing: salt + iv + authTag + encryptedData
     */
    static encrypt(data: string, token: string): string;
    /**
     * Decrypts data encrypted with encrypt()
     * @param encryptedData - Base64 encoded encrypted data
     * @param token - Encryption token/password (must match encryption token)
     * @returns Decrypted plain text data
     */
    static decrypt(encryptedData: string, token: string): string;
}