Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.
Sign up to join this community
As I'm going through the Feistel network in the DES algorithm.
While encryption uses a Feistel Network, the input block is divided into two halves left ($L$) and right half ($R$). In each round, the right half $R$ goes through unchanged. But the left part $L$ goes through an operation $F$.
I didn't understand why right halves is kept unchanged in a Feistel Network. Can anyone explain?
If you examine the diagram for a Feistel Network, you will see the crossing of the wires which indicates the swapping of the blocks:
At the end of each round, the left and the right halves are swapped, such that the block that was previously the target block is now the source block, and the block that was previously the source is now the target.
Thus, despite the fact that the addition of the output of the PRF is only ever targeted at one side of the block, both halves are operated on over the course of multiple rounds.
This structure allow us to make the process invertible. A Feistel structure creates a pseudo random permutation from a pseudo random function. We want someone with the key to be able to calculate it in reverse and get the plain text from the cipher text.
Also recall that the after two rounds both sides get scrambled and after many rounds they are thoroughly scrambled to make deciphering without the secret key rather difficult. DES is no longer considered secure but the Feistel structure is still used in other block ciphers.
The structure of the Feistel network allows one to use a Pseudorandom function which does not have to be invertible. Thus one is more flexible in designing $F$.
