A. Root certificate B. Key in escrow C. Public key D. Private key
Answer: D
Explanation: A key recovery agent is an entity that has the ability to recover a private key, key components, or plaintext messages as needed. Using the recovered key the recovery agent can decrypt encrypted data.