SNOW
A family of stream ciphers from Lund that ended up in mobile networks, protecting traffic in UMTS and LTE.
SNOW 1.0 was presented in 2000 by Patrik Ekdahl and Thomas Johansson, followed by SNOW 2.0 in 2002. The cipher combines an LFSR with a nonlinear function that uses AES-like components. The variant SNOW 3G, specified by 3GPP, is used in UMTS and LTE for confidentiality and integrity over the radio interface.
It is an unusual story for an academic cryptographic design: it began as research and became a standard in billions of phones. Every time a mobile phone talks to a base station, it is, technically speaking, using SNOW.