Chip vs Chip

MIFARE DESFire EV2 vs MIFARE DESFire Light

MIFARE DESFire EV2 offers 2-32 KB memory with AES-128 + proximity check security, making it ideal for high-security transit, national ID, government. MIFARE DESFire Light provides 640 bytes with AES-128 + LRP security, suited for transit tickets, loyalty, micro-payment tokens.

MIFARE DESFire EV2 vs MIFARE DESFire Light

EV2 and DESFire Light serve completely different deployment tiers. EV2 is a full-featured multi-application secure card platform; DESFire Light is a cost-optimized single-application disposable ticket chip.


Overview

MIFARE DESFire EV2: AES-128, Proximity Check, MIsmartApp, 2–32 KB, full DESFire file system with multiple AIDs. High-assurance, multi-year card credentials.

MIFARE DESFire Light: AES-128 + LRP, single application, fixed file structure, 640 bytes, simplified ISO 14443-4 command set. Low-cost disposable tickets.


Key Differences

  • Multi-application: EV2 supports multiple AID-isolated applications. DESFire Light supports exactly one.
  • Memory: EV2 up to 32 KB; DESFire Light 640 bytes.
  • Proximity Check: EV2 includes relay attack protection. DESFire Light does not.
  • Cost: DESFire Light costs ~4–6× less than EV2 at volume, enabling AES security in disposable ticket contexts.
  • LRP: DESFire Light uniquely supports LRP (Leakage Resilient Primitive) authentication mode alongside AES-128. EV2 supports AES-128 and 3DES.
  • Target lifecycle: EV2 cards are issued for years. DESFire Light tickets may be used for a single journey.

Technical Comparison

Parameter MIFARE DESFire EV2 MIFARE DESFire Light
Memory 2–32 KB 640 bytes
Security AES-128, Proximity Check AES-128, LRP
Applications Multiple (AID isolated) Single
Proximity Check Yes No
MIsmartApp Yes No
Protocol Full ISO 14443-4 ISO 14443-4 (subset)
Target lifecycle Multi-year Disposable
Typical cost (volume) $0.50–$1.00 $0.12–$0.28

Verdict

These chips occupy different market tiers and are complementary rather than competing. Use EV2 for long-lived, multi-application card credentials requiring relay attack protection. Use DESFire Light for disposable, single-application tickets where cost is the primary driver. A transit operator might issue EV2 for season passes and DESFire Light for single-journey tickets.

Рекомендация

Choose MIFARE DESFire EV2 when you need relay attack protection via proximity check; choose MIFARE DESFire Light when you need DESFire security in a cost-optimized package.