RootCanal: Authentication challenge

Note that this is not totally matches spec. It only makes
sure that link key must be matched and a random number is
used for verification.

Tag: #feature
Test: gd/cert/run ---host
Bug: 235777894
Change-Id: I1e5c13e2e28a79b2ccbf08feb306a15d6f57a0ec