How is the Subscription Concealed Identifier $($SUCI$)$ technically generated in $5$G networks, and how does this process enhance subscriber privacy?

Question $2$ options:

The SUCI is randomly generated by the User Endpoint device each time it connects to the network, which obscures the SUPI by regularly changing the identifier.

The SUCI is created by encrypting the SUPI using the Carrier's public key stored on the SIM card, making the encrypted identifier $($SUCI$)$ only decryptable by the Carrier's private key.

The SUCI is derived from the SUPI using a unique identifier provided by the Authentication Management Function $($AMF$),$ which prevents any external entities from accessing the original SUPI.

The SUCI is generated by hashing the SUPI and storing it on the mobile device, ensuring that the SUPI is never transmitted over the network.