Which aspect of an authenticator may be independent of message content?

• A. A cryptographic checksum
• B. A nonce or source identifier
• C. An encryption key
• D. User identification

Answer: (B)

A nonce or source identifier is an aspect of an authenticator that is independent of message content. A nonce (number used once) is a unique value generated for each authentication session to prevent replay attacks. Its primary function is to ensure that even if an authentication message is intercepted, it cannot be reused because the nonce will not be valid for subsequent sessions. This characteristic highlights the independence of the nonce from the content of the messages being authenticated, as its uniqueness is designed to specifically prevent unauthorized reuse rather than relate to the specific details of the message itself.

In contrast, other options have direct ties to the content or context of the messages being sent. A cryptographic checksum, for example, depends on the actual message content to generate a hash value, which changes if the message content changes. An encryption key is also closely related to the data being encrypted; it is used in conjunction with the specific data to produce an encrypted output. User identification is inherently tied to the user and their credentials, which relate directly to the content of the authentication process.