Security of a Keystream Cipher with Secret Initial Value.

Robert S. Winternitz Security of a Keystream Cipher with Secret Initial Value. 133-137 1982 CRYPTO db/conf/crypto/crypto82.html#Winternitz82