/**
 * Generate a cryptographically random salt as a hex string.
 */
export declare function generateSalt(): string;
/**
 * Hash a password with the given salt using scrypt.
 * Returns a hex-encoded derived key.
 */
export declare function hashPassword(password: string, salt: string): Promise<string>;
/**
 * Verify a password against a stored hash and salt.
 * Uses timing-safe comparison to prevent timing attacks.
 */
export declare function verifyPassword(password: string, storedHash: string, salt: string): Promise<boolean>;
//# sourceMappingURL=password.d.ts.map