Finding state collisions in the authenticated encryption stream cipher ACORN