In the Kerberos authentication process, the user and service authenticators are records containing recent information encrypted with a (temporary) session key (known to client and server)