Which components does HMAC use to determine the authenticity and integrity of a message?

Which components does HMAC use to determine the authenticity and integrity of a message?
(Choose two.)
A. The password
B. The hash
C. The key
D. The transform set