/**
 * Argon2id password hashing implementation.
 *
 * Uses `@node-rs/argon2` for native performance with OWASP-recommended parameters.
 * Includes timing attack resistance via `verify_dummy`.
 *
 * Import `argon2_password_deps` for use as `PasswordHashDeps` in `AppDeps`.
 *
 * @module
 */
import type { PasswordHashDeps } from './password.js';
/**
 * Hash a password using Argon2id.
 *
 * @param password - the plaintext password to hash
 * @returns the Argon2id hash string
 */
export declare const hash_password: (password: string) => Promise<string>;
/**
 * Verify a password against an Argon2id hash.
 *
 * @param password - the plaintext password to verify
 * @param password_hash - the Argon2id hash to verify against
 * @returns `true` if the password matches
 */
export declare const verify_password: (password: string, password_hash: string) => Promise<boolean>;
/**
 * Verify a password against a dummy hash for timing attack resistance.
 *
 * Always returns `false`, but takes the same time as a real verification.
 * Call when account lookup fails to prevent timing-based user enumeration.
 *
 * @param password - the plaintext password to "verify"
 * @returns always `false`
 */
export declare const verify_dummy: (password: string) => Promise<boolean>;
/**
 * Argon2id implementation of `PasswordHashDeps`.
 *
 * Pass as `password` in `AppDeps` / `CreateAppBackendOptions` for production use.
 */
export declare const argon2_password_deps: PasswordHashDeps;
//# sourceMappingURL=password_argon2.d.ts.map