Ann, a security administrator, wants to ensure credentials are encrypted in transit when implementing a RADIUS server for SSO. Which of the following are needed given these requirements? (Select TWO)

A public key is part of the asymmetric key pair used in TLS (e.g., RADIUS over TLS or RADSEC), where the server's public key is shared with clients to encrypt data and establish a secure tunnel for credential transmission.

A shared key (shared secret) is used in standard RADIUS to obfuscate passwords using MD5, but this does not provide full encryption in transit and does not meet the requirement of encrypting credentials.

Elliptic curve refers to ECC (Elliptic Curve Cryptography), an algorithm type rather than a specific component needed to implement encrypted RADIUS; it is not a standalone requirement for RADIUS credential encryption.

MD5 is the hashing algorithm used in standard RADIUS to obfuscate passwords, but it is not encryption and is considered cryptographically weak, so it does not satisfy the requirement to encrypt credentials in transit.

A private key is the counterpart to the public key in asymmetric encryption; the RADIUS server uses its private key to decrypt data encrypted with the public key and to authenticate itself during the TLS handshake, ensuring end-to-end encryption of credentials in transit.

DES (Data Encryption Standard) is an outdated and insecure symmetric encryption algorithm that is not used in modern RADIUS implementations for securing credentials in transit.