docs: private static byte[] makeRandomChallenge(final Random random) throws AuthenticationException {
          final byte[] rval = new byte[8];
          synchronized (random) {
              random.nextBytes(rval);
          }
          return rval;
      }