Verifies the platform authenticator supports the WebAuthn prf extension and that PRF outputs are deterministic for a given salt — required for Phase 3's KEK-derivation design.
prf