Whirlpool Hash Generator
Generate the Whirlpool hash of any text.
Was this tool helpful?
Thanks for the feedback!
Whirlpool is a 512-bit cryptographic hash function designed by Vincent Rijmen, co-creator of AES, and Paulo Barreto. Paste text into this Whirlpool hash generator to get its 128-character hexadecimal digest, usually because an older application, database or encryption tool expects Whirlpool specifically.
Background: a close relative of AES
Whirlpool first appeared in 2000 and was revised twice. Whirlpool-T (2001) changed the substitution box to make hardware implementations easier, and the final version (2003) fixed a weakness found in its diffusion matrix. The algorithm was selected by the European NESSIE project and adopted in the international standard ISO/IEC 10118-3.
Inside, Whirlpool uses a dedicated 512-bit block cipher, usually called W, that follows the same design ideas as AES, and chains it through the Miyaguchi–Preneel construction over 10 rounds per block. This page uses PHP's hash('whirlpool'), which implements the final 2003 version. Libraries that still implement Whirlpool-0 or Whirlpool-T give different digests for the same text.
Example digests
An empty input returns the standard test value for an empty message (split into lines here; the tool prints one line):
19fa61d75522a4669b44e39c1d2e1726 c530232130d407f89afee0964997f7a7 3e83be698b288febcf88e3e03c4f0757 ea8964e59b63d93708b138cc42a66eb3
The quick brown fox jumps over the lazy dog begins b97de512e91e3828. Change the last word to "cog" and the digest begins dce81fc695cfea3d instead; not a single character position carries over in a predictable way.
Where Whirlpool still turns up
- Disk encryption. VeraCrypt, like TrueCrypt before it, lets you choose Whirlpool as the hash used to derive header keys from your password.
- Legacy web applications. Some older PHP forums and content systems stored Whirlpool digests, and migrating their data means reproducing them.
- Coursework and comparisons, where Whirlpool is studied as an alternative design to the SHA family.
Whirlpool and SHA-512 both print 128 hex characters, yet they are unrelated algorithms and never produce the same value. Label stored hashes clearly so nobody mixes them up.
Processing details and choosing an algorithm
The text you submit goes to our server for hashing, and only the digest comes back. It is read as UTF-8, any spaces or line breaks at the very start and end are trimmed first, and up to 100,000 characters are accepted.
No practical attack on the full 10-round function has been published, but Whirlpool receives far less study, library support and hardware acceleration than SHA-2, and it is not among the hash functions approved in the US federal standard FIPS 180-4. Unless a system requires Whirlpool, new work is better served by the SHA512 Hash Generator or the SHA256 Hash Generator. Neither Whirlpool nor SHA-2 should store passwords on their own, because all of them are fast.