This PR follows on #35. It implements PRF handling for the authenticator in passkey-authenticator following hmac-secret from the CTAP2 specification. Because both authenticator and client live in memory, we pass the hmac-secret outputs in the unsigned extension outputs map instead of encrypting them and sending them as part of the "extensions" parameter.
This PR follows on #35. It implements PRF handling for the authenticator in
passkey-authenticator
following hmac-secret from the CTAP2 specification. Because both authenticator and client live in memory, we pass the hmac-secret outputs in the unsigned extension outputs map instead of encrypting them and sending them as part of the "extensions" parameter.