AES-based · 512-bit · ISO/IEC 10118-3
Whirlpool is a 512-bit cryptographic hash function designed by Vincent Rijmen (co-designer of AES) and Paulo Barreto. Uses a modified AES with 512-bit block size in Miyaguchi-Preneel construction. Standardized as ISO/IEC 10118-3.
Input text box — the 128-character Whirlpool digest appears instantly below.Whirlpool (512-bit / 128 hex) panel.Copy to grab the full 512-bit digest to your clipboard.Clear to empty the input and start over.openssl dgst -whirlpool against the same bytes.Compare a computed Whirlpool digest against a known value to confirm a download or backup hasn't been corrupted or tampered with.
Turn any payload into a fixed 512-bit fingerprint for deduplication, cache keys, or quick equality checks without storing the original.
The same input always produces the same digest, so you can derive stable, collision-resistant IDs from arbitrary content.
Whirlpool is standardized as ISO/IEC 10118-3 and adopted by the NESSIE project, so its output matches other compliant implementations.
Pair Whirlpool with a secret key in an HMAC construction for message authentication when you need a 512-bit tag.
Everything runs in your browser. Nothing is uploaded, logged, or sent to a server — safe for sensitive input.
Whirlpool is a 512-bit cryptographic hash function designed by Vincent Rijmen and Paulo Barreto. It is based on a modified version of the AES block cipher and is standardized as ISO/IEC 10118-3.
Whirlpool produces a larger 512-bit digest (vs. 256 for SHA-256 and 128 for MD5) and uses an AES-derived block cipher rather than the Merkle–Damgård designs those families use. It's a separate standard, not a drop-in alias for SHA.
A Whirlpool digest is 512 bits, which is 64 bytes. Each byte is two hex digits, so the digest is always exactly 128 uppercase hex characters — no matter the input length.
No. Hashing is one-way by design. The digest doesn't contain enough information to reconstruct the original message, and there's no "decrypt" operation.
Yes — the avalanche effect means flipping a single character produces a completely different digest, which is how you can detect even one-bit changes.
A raw hash is not enough for passwords — you should use a slow, salted KDF like bcrypt, scrypt, or Argon2. Whirlpool is a fast general-purpose hash, not a password KDF.
Never. The digest is computed locally in JavaScript. Your input is not sent to, stored on, or logged by any server.