Practical attack on NLM-MAC scheme
A key recovery attack breaks NLM-n  generator with time complexity about n log 7  2 . By having only one pair (MAC tag, ciphertext), a forgery attack on the MAC function has been applied in real time. The proposed attacks are completely practical.
key recovery attack forgery attack mac function cryptography nlm stream cipher cryptanalysis