remove NTLM, SMB and local crypto implementations

Daniel Stenberg via curl-library <[email protected]> Mon, 23 Mar 2026 22:42:49 +0100 (CET)
Newsgroups gmane.comp.web.curl.library
Message-ID <[email protected]>
Hello team,

We have decided that later this year it is time to trim off some more things 
from curl:

- NTLM

NTLM just became opt-in, we plan to completely remove support for it in 
September 2026

- SMB

SMB just became opt-in, we plan to completely remove support for it in 
September 2026

- Local crypto implementations

We plan to remove all local / vendored crypto algorithm implementstions by 
October 2026. This means that we remove all implmentations of MD4, MD5, SHA256 
and SHA256_512 from curl source code. Instead, we will rely on TLS/crypto 
libraries and their implementations of these algorithms.

This also means that after this, curl built without TLS support will not have 
support for any features that needs these algorithms. Like Digest and 
AWS-sigv4.

- feedback

As always, we set these dates far ahead to allow everyone to speak up, provide 
feedback and start preparing.

Thanks for flying curl.

-- 

  / daniel.haxx.se || https://rock-solid.curl.dev
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html