Fix the issue in Grain128, for the output bit s94 instead of s95.

Author: gefeili

core/src/main/java/org/bouncycastle/crypto/engines/Grain128Engine.java

@@ -188,7 +188,7 @@ private int getOutput()
         int s60 = lfsr[1] >>> 28 | lfsr[2] << 4;
         int s79 = lfsr[2] >>> 15 | lfsr[3] << 17;
         int s93 = lfsr[2] >>> 29 | lfsr[3] << 3;
-        int s94 = lfsr[2] >>> 31 | lfsr[3] << 1;
+        int s94 = lfsr[2] >>> 30 | lfsr[3] << 2;
 
         return b12 & s8 ^ s13 & s20 ^ b95 & s42 ^ s60 & s79 ^ b12 & b95 & s94 ^ s93
             ^ b2 ^ b15 ^ b36 ^ b45 ^ b64 ^ b73 ^ b89;

core/src/test/java/org/bouncycastle/crypto/test/Grain128Test.java

@@ -15,8 +15,8 @@ public class Grain128Test
     extends SimpleTest
 {
 
-    String keyStream1 = "f09b7bf7d7f6b5c2de2ffc73ac21397f";
-    String keyStream2 = "afb5babfa8de896b4b9c6acaf7c4fbfd";
+    String keyStream1 = "4bdb20824c5dce6fc63e94456c3281d4";
+    String keyStream2 = "ba399daf90df8eba103d9ea83c805904";
 
     public String getName()
     {