synchronous stream cipher

The equation for a synchronous cipher is:
let
sigma_i+1=f(sigma_i, k ),
z_i=g( sigma_i, k ),
c_i=h( z_i, m_i),
where: sigma₀ is the initial state determined from the key k, f is the next state function, g is the function which produces the keystream z_i, and h is the output function which combines the keystream and the plaintext to produce the ciphertext c_i.

Properties of synchronous stream ciphers

• Both the sender and the receiver must be synchronized, eg. using the same key and position in that key.
• No error propagation, a modified ciphertext digit (not deleted) has no effect on other digits in the ciphertext
• Active attacks:
  Because of the first property, the insertion, deletion, or replay of ciphertext digits by an active adversary causes immediate loss of synchronization.
  An active attacker might possibly attack select ciphertext digits and know exactly what effect those changes have on the plaintext.