Most TPMs support encryption algorithms as well via symmetrical keys. While this explainer currently focuses the examples on asymmetric crypto, there's nothing to stop using symmetrical crypto algorithms for encryption and decryption. This would be a good alternative to the PRF extension in Passkeys which has limited support depending on what type of authenticator is in use.