Cryptographic

Whirlpool

A 512-bit cryptographic hash function designed by Paulo Barreto and Vincent Rijmen (the co-designer of AES) in 2000. Whirlpool is built around an AES-like block cipher and used via the Miyaguchi-Preneel mode. Standardized as part of ISO/IEC 10118-3.

At a glance

Where it shows up

• TrueCrypt / VeraCrypt , selectable hash for header authentication.
• Linux crypt , the $whirl$ identifier (rare).
• NESSIE project , recommended in 2003 alongside SHA-256.
• Legacy storage products , some enterprise integrity products.

Why it is not more popular

Whirlpool is solid cryptographically , no practical break is known , but it competes against algorithms with significant ecosystem advantages: SHA-2 has NSA / NIST blessing and hardware acceleration on every CPU since 2013; SHA-3 has the same NIST status with a different construction; BLAKE2/3 are dramatically faster. Whirlpool ended up chosen for niche use cases where ISO/IEC mattered more than speed or ubiquity.

Internal structure

The block cipher at the heart of Whirlpool is AES-like: a 8×8 byte state, 10 rounds of SubBytes / ShiftColumns / MixRows / AddRoundKey. Whirlpool’s S-box is its own design (chosen to maximize differential and linear resistance). The Miyaguchi-Preneel mode XORs each block’s ciphertext, plaintext, and previous state to update the chaining variable.

Try it

Whirlpool is in the algorithm catalog and available via the comparator for side-by-side specs.

References

• ISO/IEC 10118-3:2018 , Information technology , Security techniques , Hash-functions
• Paulo Barreto , The Whirlpool Hash Function page
• NESSIE project , final report (2003)