/// <reference types="node" />
/// <reference types="pouchdb-core" />
import IPayloadProtectionOptions from "./IPayloadProtectionOptions";
import { PublicKey } from "../..";
import IVerificationResult from "./IVerificationResult";
import { ICryptoToken } from "./ICryptoToken";
/**
 * Interface defining the implementation of the selected protocol.
 */
export interface IPayloadProtection {
    /**
     * Signs contents using the given private key reference.
     *
     * @param signingKeyReference Reference to the signing key.
     * @param payload to sign.
     * @param format of the final signature.
     * @param options used for the signature. These options override the options provided in the constructor.
     * @returns Signed payload in requested format.
     */
    sign(signingKeyReference: string, payload: Buffer, format: string, options?: IPayloadProtectionOptions): Promise<ICryptoToken>;
    /**
     * Verify the signature.
     *
     * @param validationKeys Public key to validate the signature.
     * @param payload that was signed
     * @param signature on payload
     * @param options used for the signature. These options override the options provided in the constructor.
     * @returns True if signature validated.
     */
    verify(validationKeys: PublicKey[], payload: Buffer, signature: ICryptoToken, options?: IPayloadProtectionOptions): Promise<IVerificationResult>;
    /**
     * Encrypt content using the given public keys in JWK format.
     * The key type enforces the key encryption algorithm.
     * The options can override certain algorithm choices.
     *
     * @param recipients List of recipients' public keys.
     * @param payload to encrypt.
     * @param format of the final serialization.
     * @param options used for the signature. These options override the options provided in the constructor.
     * @returns JweToken with encrypted payload.
     */
    encrypt(recipients: PublicKey[], payload: Buffer, format: string, options?: IPayloadProtectionOptions): Promise<ICryptoToken>;
    /**
     * Decrypt the content.
     *
     * @param decryptionKeyReference Reference to the decryption key.
     * @param token The crypto token to decrypt.
     * @param options used for the decryption. These options override the options provided in the constructor.
     * @returns Decrypted payload.
     */
    decrypt(decryptionKeyReference: string, cipher: ICryptoToken, options?: IPayloadProtectionOptions): Promise<Buffer>;
    /**
     * Serialize a cryptographic token
     * @param token The crypto token to serialize.
     * @param format Specify the serialization format. If not specified, use default format.
     * @param options used for the decryption. These options override the options provided in the constructor.
     */
    serialize(token: ICryptoToken, format: string, options?: IPayloadProtectionOptions): string;
    /**
     * Deserialize a cryptographic token
     * @param token The crypto token to serialize.
     * @param format Specify the serialization format. If not specified, use default format.
     * @param options used for the decryption. These options override the options provided in the constructor.
     */
    deserialize(token: string, format: string, options?: IPayloadProtectionOptions): ICryptoToken;
}