- md is not concurrency safe, so the whole thing needs to be synchronized or...

- md is not concurrency safe, so the whole thing needs to be synchronized or we need a pool, like ThreadLocal
- There's a convenience method that creates hex string