algebraic attacks on GHOST, etc: - http://crypto.2015.rump.cr.yp.to/1ea2c6c01144e0e7f6b14b324c5e4562.pdf - https://eprint.iacr.org/2015/812.pdf AES has intentional algebraic structure as well, yet also resists linear, differential cryptanalysis. (e.g. strong in these aspects despite simple algebraic structure) how long until someone discovers a workable algebraic attack? when will we get S-Box constants and other magics truly generated at random? No more up my sleeve numbers! :) best regards,