In order to avoid this attack, the function F can be replaced
by a similar lightweight but strong cryptographic primitive
like a shrinking generator. Note that the shrinking generator
uses just two or more LFSRs which would still stay within
2000 gate limit. For further details of the security analysis of
shrinking generators we refer to [7], [16].