Which two statements are correct regarding NSA Suite B? (Choose two.)
A. Use AES with 128- or 256-bit keys in the GCM mode.
B. The SHA-1 message digest has stronger security than SHA-2.
C. NSA Suite B calls for AES CBC mode because it can provide authenticated encryption.
D. NSA Suite B calls for ECDH, which is a more advanced variant of the Diffie-Hellman algorithm using the elliptic curve mathematics model.
