/**
 * Generates a cryptographically secure session ID.
 *
 * Uses 32 bytes (256 bits) of entropy, which provides sufficient security
 * for session identification per OWASP guidelines.
 *
 * @returns A 64-character hexadecimal session ID
 *
 * @example
 * ```typescript
 * const sessionId = generateSecureSessionId();
 * // Returns: "a1b2c3d4e5f6...048" (64 hex characters)
 * ```
 */
export declare function generateSecureSessionId(): string;
/**
 * Validates a session ID format.
 *
 * Session IDs must be exactly 64 hexadecimal characters (representing 32 bytes).
 * This validation helps prevent injection attacks and ensures consistency.
 *
 * @param sessionId - The session ID to validate
 * @returns True if the session ID has a valid format, false otherwise
 *
 * @example
 * ```typescript
 * validateSessionIdFormat('abc123'); // false - too short
 * validateSessionIdFormat('g1h2...'); // false - invalid hex
 * validateSessionIdFormat('a1b2c3...048'); // true - 64 hex chars
 * ```
 */
export declare function validateSessionIdFormat(sessionId: string): boolean;
//# sourceMappingURL=sessionIdUtils.d.ts.map