fips

Does RADIUS’s use of the MD5 algorithm make it not FIPS compliant for an application that allows RADIUS authentication?

The issue is if you enforce FIPS compliance in the Windows security policy settings, an exception will be thrown because RADIUS protocol uses the MD5 algorithm to hash the request authenticator. There is not an alternative MD5 algorithm that is FIPS compliant so it does not appear any code implementation of RADIUS would be possible on a ...

TripleDESCryptoServiceProvider FIPS 140-2 Compliance

Hello everybody. I am using the System.Security.Cryptography's TripleDESCryptoServiceProvider in the following manner: TripleDESCryptoServiceProvider CreateCipher() { TripleDESCryptoServiceProvider cipher = new TripleDESCryptoServiceProvider(); cipher.KeySize = 192; cipher.BlockSize = 64; ...

How to disable fips in asp .net

Hello I want to disalbe fips in asp .net x64 application. In web.config I added <runtime> <enforceFIPSPolicy enabled = "false"> </runtime> I set debug to false. However my application do not work. Should I declare runtime section in < configSections > ? If yes then is it a proper line <section name="runtime" type="System.Confi...

Why are the .NET "Managed" Cryptography classes NOT FIPS compliant?

I have been working on making our .NET application FIPS compliant, and have found that the Managed Cryptography classes (such as AESManaged) are not FIPS compliant. I have read several other articles and questions on which classes are compliant, such as http://stackoverflow.com/questions/939040/when-will-c-aes-algorithm-be-fips-compliant...