… second preimage resistance of the Whirlwind hash function. More precisely, we apply a
meet in the middle preimage … a 5-round pseudo preimage for a given compression function …

… analysis on Whirlwind. Firstly, we focus on security properties at the hash function level by
presenting (second) preimage, … present the second preimage attack on 6-round Whirlwind with …

… and collision attacks, as well as analysis of the compression function and inner … second
preimage resistance and gave second preimage attacks of the 5 and 6-round reduced Whirlwind. …

… second preimage and … preimages of the reduced hash function [1], the complexity of their
attack was later improved in [19]. They also presented a second preimage analysis of Whirlwind …

… In security analysis, they have shown that the signature … a cryptographic hash function
Whirlwind which can be efficiently … of maintaining preimage resistance and second preimage …

… analysis, we … -preimage attacks can be converted into second-preimage attacks, in which
the crafted messages reuse the last block of the given message, and the target is the second to …

… To facilitate the visualization of our analysis, each cell can take one of the four colors (Gray,
Red, Blue, and White) according to certain rules, and a valid coloring scheme in our model …

… This paper analyzed the latency and memory consumption … [17] proposed Whirlwind,
designed to address cryptanalytic … offer full preimage and second preimage; reduced second …

… AES rounds), the proposed analysis by Yu Sasaki can be … be used to generate second
Preimage attack on reduced [5] … From the previously presented discussion, we can see that Whirl…

… plete, and the stage is set for singularity analysis. Section 6 gives a whirlwind tour of the
necessary analytic background, developed far less carefully than the preceding algebraic …