# Why are the right halves kept unchanged in Feistel networks?

As I'm going through the Feistel network in the DES algorithm.

While encryption uses a Feistel Network, the input block is divided into two halves left ($L$) and right half ($R$). In each round, the right half $R$ goes through unchanged. But the left part $L$ goes through an operation $F$.

I didn't understand why right halves is kept unchanged in a Feistel Network. Can anyone explain?

• Possible duplicate of Feistel cipher structure See answer 4
– mat
Aug 4, 2017 at 15:17
• I disagree with the duplicate mark. This question is more specific and so are the answers, including my own. Aug 5, 2017 at 3:46
• @MeirMaor: Agreed. I've voted to reopen this question and, if it's reopened, will vote to close the other question as a duplicate of this one. Aug 6, 2017 at 19:34
• @IlmariKaronen Reopened… btw: please note that that other question is actually asking what the F function does, not why the right halves of a Feistel structure are kept unchanged. (Which is why I reopened this Q.) Aug 7, 2017 at 1:37
• Related: “Feistel-Network - why wire crossing? Aug 7, 2017 at 1:56

If you examine the diagram for a Feistel Network, you will see the crossing of the wires which indicates the swapping of the blocks:

At the end of each round, the left and the right halves are swapped, such that the block that was previously the target block is now the source block, and the block that was previously the source is now the target.

Thus, despite the fact that the addition of the output of the PRF is only ever targeted at one side of the block, both halves are operated on over the course of multiple rounds.

• Maybe this answer could mention that putting an F block on the way from R1 to L2 would not actually increase security (and would needlessly use Ks). Aug 8, 2017 at 10:20

This structure allow us to make the process invertible. A Feistel structure creates a pseudo random permutation from a pseudo random function. We want someone with the key to be able to calculate it in reverse and get the plain text from the cipher text.

Also recall that the after two rounds both sides get scrambled and after many rounds they are thoroughly scrambled to make deciphering without the secret key rather difficult. DES is no longer considered secure but the Feistel structure is still used in other block ciphers.

The structure of the Feistel network allows one to use a Pseudorandom function which does not have to be invertible. Thus one is more flexible in designing $F$.