HOW TO USE

To Register

• Generate yourself a Request, consisting of your site/service uri, u2f version number, etc, send it to the client.
• Assuming the client returned a registration response (Registration), parse it with parseRegistration.
• Use verifyRegistration Request Registration to verify that the Registration is valid. (Challenge bytes match, were signed by key described in cert)
• Stash the publicKey and keyHandle somewhere, so you can use them for signin. verifyRegistration returns a Request, with added keyHandle, for convenience.

To Signin

• Make a Request.
• Parse whatever signin json you have with parseSignin.
• Dig out the publicKey for the relevant keyHandle.
• Verify signin with verifySignin publicKey Request Signin