How is data between a router and a TACACS+ server encrypted?

How is data between a router and a TACACS+ server encrypted?

A.
CHAP Challenge responses

B.
DES encryption, if defined

C.
MD5 has using secret matching keys

D.
PGP with public keys