MIFARE Classic 4K vs MIFARE DESFire EV2
MIFARE Classic 4K offers 4096 bytes memory with Crypto-1 (broken) security, making it ideal for legacy transit with stored value, multi-application cards. MIFARE DESFire EV2 provides 2-32 KB with AES-128 + proximity check security, suited for high-security transit, national ID, government.
MIFARE Classic 4K
MIFARE DESFire EV2
MIFARE Classic 4K vs MIFARE DESFire EV2
DESFire EV2 extends EV1's already comprehensive security advantage over Classic 4K with proximity-check relay attack protection and the MIsmartApp multi-tenancy framework.
Overview
MIFARE Classic 4K: 4,096 bytes, Crypto-1Crypto-1Broken proprietary cipher in MIFARE Classic (reverse-engineered 2008)View full → (broken), ISO 14443ISO 14443Standard for contactless smart cards at 13.56 MHz (Types A and B)View full →-3A, 40 sectors.
MIFARE DESFire EV2: AES-128 + Proximity Check, 2–32 KB, ISO 14443-4, MIsmartApp framework for delegated application management. EV2 was the mandated platform for several national transit network upgrades in the 2015–2020 period.
Key Differences
- Relay attack protection: EV2 adds Proximity Check — a timing-based protocol that verifies the card is physically near the reader. Classic 4K has no such protection.
- Memory ceiling: EV2 in 32 KB configuration provides ~9× more memory than Classic 4K.
- Application management: MIsmartApp allows a card issuer to delegate key management for specific AIDs to third-party service providers without exposing the master key.
- Security posture: Classic 4K is cryptographically broken. EV2 has no known practical attack.
Technical Comparison
| Parameter | MIFARE Classic 4K | MIFARE DESFire EV2 |
|---|---|---|
| Memory | 4,096 bytes | 2–32 KB |
| Security | Crypto-1 (broken) | AES-128 + Proximity Check |
| Relay attack protection | None | Yes |
| Delegated app management | No | Yes (MIsmartApp) |
| Protocol | ISO 14443-3A | ISO 14443-4 (T=CL) |
| NDEF support | No | Yes |
| Typical cost (volume) | $0.15–$0.35 | $0.50–$1.00 |
Use Cases
EV2 replaces Classic 4K in multi-application, high-security environments where relay attack scenarios are a concern: premium transit networks, national ID programs, and high-value corporate access systems.
Verdict
EV2 is the correct modern replacement for Classic 4K in any multi-application program. The relay attack protection and delegated application management capabilities make it the right choice for post-2020 card issuance.
Рекомендация
Choose MIFARE Classic 4K when you need largest Classic with 4 KB memory; choose MIFARE DESFire EV2 when you need relay attack protection via proximity check.