the option of a block cipher that uses different non-linear substitutions in different rounds. However, it would seem that key-dependent and/or data-dependent non-linear substitutions are more resistant to attack than Serpent's static set of s-boxes used with a static schedule. -Karl