Which components does HMAC use to determine the authenticity and integrity of a message?

Which components does HMAC use to determine the authenticity and integrity of a message? (Choose two.)

A.
The password

B.
The hash

C.
The key

D.
The transform set