Challenge-handshake authentication protocol