csa was largely kept secret until 2002. the patent papers gave some hints, but important details, like the layout of the so-called s-boxes, remained secret. without these, free implementations of the algorithm was not possible. initially, csa was to remain implemented in hardware only, making it difficult to reverse engineer existing implementations.