New creates a new Device Trust challenge with the default length.

Sign returns a signature over [challenge] by [signer].

Verify verifies that [sig] is a signature over [chal] by the private key corresponding to [pubKey].