The nonce chosen by the server. Must be at most 128 bytes long, as this is the largest nonce size supported by Android.