🌀Whirlpool

NEW

A 512-bit cryptographic hash function by Barreto and Rijmen, constructed from an AES-like block cipher design.

DESCRIPTION

Whirlpool is a dedicated hash function designed by Paulo S. L. M. Barreto and Vincent Rijmen, the co-designer of AES. It uses an AES-like permutation within a Miyaguchi–Preneel construction and outputs a 512-bit digest. Whirlpool is standardized in ISO/IEC 10118-3 but is less commonly used than SHA-2/3 in mainstream protocols. It remains a robust, well-specified alternative, particularly in contexts aligning with ISO standards.

ALTERNATIVE DEFINITIONS

Paulo Barreto

Whirlpool is a 512-bit, ISO/IEC-standardized cryptographic hash function built from an AES-like block cipher.

Designer’s summary; paraphrased due to offline generation.

Source

ISO/IEC 10118-3

ISO/IEC 10118-3 specifies dedicated hash-functions, including Whirlpool, for information security applications.

References inclusion within an ISO standard; paraphrased due to offline generation.

Source

RELATED TERMS

Rijndael ISO/IEC 10118-3 SHA-3 BLAKE Skein Cryptographic Hash Function Collision Resistance HMAC Checksum

COMPETING TERMS

SHA-2

KNOWLEDGE AREAS

Data Security Software Engineering

TARGET AUDIENCE

Security Architect Cybersecurity Engineer Software Developer IT Auditor

EXTERNAL SOURCES

• Wikipedia - Whirlpool (hash function)
• Paulo Barreto - Official Whirlpool algorithm page.
• ISO - ISO/IEC 10118-3 standard reference.

TOP QUESTIONS

Is Whirlpool widely adopted?

It’s standardized by ISO but less common than SHA-2/3 in mainstream protocols and libraries.

Category: Relevancy

How does Whirlpool relate to AES?

Whirlpool’s internal permutation is AES-like, leveraging similar diffusion and substitution structures.

Category: Distinction

What is Whirlpool’s digest size?

It produces a 512-bit (64-byte) hash.

Category: Definition

Is Whirlpool suitable for new protocols?

Technically yes, but interoperability and library support often favor SHA-2/3.

Category: Recommendation

Is Whirlpool secure?

No practical attacks are known on full Whirlpool; it is considered secure though less studied than SHA-2/3.

Category: Risks

Does ISO standardization help Whirlpool’s adoption?

It provides formal specification, but ecosystem momentum largely favors NIST SHA standards.

Category: Opinion

What is a common misunderstanding about Whirlpool?

That ISO standardization implies broad usage; in practice, deployment depends on tool and vendor support.

Category: Misunderstanding

Can Whirlpool be used for HMAC?

Yes, HMAC can wrap Whirlpool, though HMAC-SHA-256/512 are more common.

Category: Application

When was Whirlpool introduced?

It was published in the early 2000s and later standardized in ISO/IEC 10118-3.

Category: Background