/**
 * Shared cryptographic helpers.
 *
 * Keep this module tiny — anything larger belongs in its own file. We
 * reach for node:crypto directly rather than a wrapper library so the
 * provenance of every primitive is auditable.
 */
/**
 * Constant-time string equality, safe against both content-difference
 * and length-difference timing side-channels. Returns false when either
 * input is empty, so callers don't accidentally authenticate as "".
 *
 * Implementation notes:
 *  - Encodes each string as UTF-8 before comparing, so equal logical
 *    strings compare equal regardless of JS engine internal reps.
 *  - When lengths differ, still performs a padded timingSafeEqual
 *    against a zero buffer of the expected length. This keeps the
 *    cost path consistent whether the lengths match or not, which
 *    avoids leaking the expected length via early-exit timing.
 */
export declare function constantTimeEqual(a: string, b: string): boolean;
//# sourceMappingURL=crypto.d.ts.map