Worse, the paper says the cipher has only 56 bits of internal state (made me think of DES, but that isn't at play here)

Even worse, they get it down to 48 bits.