Answers are grounded in this paper and cite their sources.
A new stream cipher, Grain, is proposed. The design targets hardware environments where gate count, power consumption and memory is very limited. It is based on two shift registers and a nonlinear filter function. The cipher has the additional feature that the speed can be increased at the expense of extra hardware. The key size is 80 bits and no attack faster than exhaustive key search has been identified. The hardware complexity and throughput compares favourably to other hardware oriented stream ciphers like E0 and A5/1.
No takes yet. Share an insight, caveat, or question.
Hell et al. (2007) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: