cURL / Mailing Lists / curl-library / Single Mail


Re: Is there a FIPS-compliant version of curl for NTLM ?

From: Daniel Stenberg <>
Date: Thu, 17 Mar 2016 23:19:26 +0100 (CET)

On Thu, 17 Mar 2016, Paul D Rotter wrote:

> I am working on FIPS-compliance for our product which uses curl/openssl.
> I've built and verified the FIPS-compliant OpenSSL, but the one area where
> we are still receiving FIPS errors is in the curl NTLM authentication
> functions:
> These functions use a single DES cipher which is not FIPS-approved.

NTLM requires DES. You can't do NTLM without it so if DES is forbidded you
need to switch off NTLM.


List admin:
Received on 2016-03-17