Editing Whirlpool (hash function) (section)

=== Version changes ===
The original Whirlpool will be called ''Whirlpool-0'', the first revision of Whirlpool will be called ''Whirlpool-T'' and the latest version will be called ''Whirlpool'' in the following test vectors.

* In the first revision in 2001, the [[S-box]] was changed from a randomly generated one with good cryptographic properties to one which has better cryptographic properties and is easier to implement in hardware.
* In the second revision (2003), a flaw in the [[MDS matrix|diffusion matrix]] was found that lowered the estimated security of the algorithm below its potential.<ref>{{cite journal
| title=On the diffusion matrix employed in the Whirlpool hashing function
| author1=Kyoji, Shibutani
| author2=Shirai, Taizo
| name-list-style=amp
| date=2003-03-11
| url=https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/whirlpool-20030311.pdf
| access-date=2018-08-09}}
</ref> Changing the 8x8 rotating matrix constants from (1, 1, 3, 1, 5, 8, 9, 5) to (1, 1, 4, 1, 8, 5, 2, 9) solved this issue.