One of the more clever aspects of the agent is how it can verify a user's identity (or more precisely, possession of a private key) without revealing that private key to anybody.

provides a peek behind the ‘magic curtain’ at what is going on for a curious reader