Move utils.go to csrand/csrand.go, and clean up the interface.

All of the obfs4 code except unit tests now uses the csrand wrapper
routines.
Randomize length when the decoder receives an out-of-bound value.

This makes the length error and MAC error indistinguishable to an
external attacker.