Micro Tools
Advertisement

Whirlpool hash generator

Generate the Whirlpool digest of any text in your browser. Whirlpool is an ISO-standardized 512-bit hash built on an AES-like block cipher.

Input

Whirlpool digests are 128 hexadecimal characters. Hand-written JavaScript implementation.

Nothing is uploaded. Everything is computed locally in your browser.
Whirlpool digest

The digest appears below in hexadecimal.

-
Advertisement

AES-like design

Whirlpool was designed by Vincent Rijmen (co-creator of AES) and Paulo Barreto, and the family resemblance shows: it uses an 8x8 byte state, an S-box, ShiftColumns, MixRows over GF(2^8) and 10 rounds, wrapped in the Miyaguchi-Preneel construction. It was adopted into ISO/IEC 10118-3 alongside SHA-2.

Security and adoption

Whirlpool outputs 512 bits with no practical attack published, giving a generous security margin. Adoption is modest compared to SHA-2, partly because it arrived later and lacks hardware acceleration, but it remains a respected, conservative choice for long-term integrity.

Related tools

JSON formatterFormat and validate JSON, privately. Regex testerTest regex live with highlighting. Base64 encoderBase64 encode and decode, plus URL encoder and JWT decoder.

Whirlpool Hash FAQs

How long is a Whirlpool hash?
512 bits, shown as 128 hexadecimal characters, the same length as SHA-512.
Whirlpool vs SHA-512?
Both are secure 512-bit hashes. SHA-512 is faster on 64-bit CPUs and far more widely supported; Whirlpool offers design diversity since it is built differently, which hedges against a class-wide break.
Who designed Whirlpool?
Vincent Rijmen, co-designer of the AES cipher, and Paulo Barreto. It was a NESSIE project selection and later ISO standardized.
Is Whirlpool still secure?
Yes. No practical preimage or collision attack against full Whirlpool has been published. Its 512-bit output gives 256-bit collision resistance.
How is it computed here?
With a hand-written JavaScript implementation of the full specification, including the 10-round block cipher, running entirely in your browser.
Advertisement