# Multiplexed stream cipher

Consider the stream cipher that consists of 3 LFSRs, with the output of one coming being used to determine which of the other 2 is used that clock cycle.

Both the IV and the polynomials are secret.

Is this broken? I know that the related shrinking generator is not, but needs buffering to avoid timing attacks.

Optimal correlation attack on the multiplexer generator, Jovan Dj. Golic, Guglielmo Morgari, Information Processing Letters 109 (2009):838–841.