MIFARE DESFire EV3 vs MIFARE DESFire Light
MIFARE DESFire EV3 offers 2-32 KB memory with AES-128 + SCP03 security, making it ideal for transit, corporate access, national programs. MIFARE DESFire Light provides 640 bytes with AES-128 + LRP security, suited for transit tickets, loyalty, micro-payment tokens.
MIFARE DESFire EV3
MIFARE DESFire Light
MIFARE DESFire EV3 vs MIFARE DESFire Light
EV3 is NXP's full-featured flagship secure card IC. DESFire Light is a cost-optimized single-application variant. They represent the two ends of the DESFire product spectrum.
Overview
MIFARE DESFire EV3: AES-128, Proximity Check, SDM, Transaction MAC, SFI, SCP03, 2–32 KB. The most capable DESFire chip, suitable for demanding transit, access, ID, and anti-counterfeiting programs.
MIFARE DESFire Light: AES-128 + LRP, single application, fixed file structure, 640 bytes. Designed for cost-sensitive, disposable, single-purpose tickets.
Key Differences
- SDM: EV3 supports Secure Dynamic Messaging. DESFire Light does not.
- Transaction MAC: EV3 generates auditable transaction MACs. DESFire Light does not.
- Proximity Check: EV3 includes relay attack protection. DESFire Light does not.
- Multi-application: EV3 supports multiple AID-isolated apps. DESFire Light supports one.
- LRP: DESFire Light uniquely includes LRP authenticationauthenticationApplicationsIdentity verification of NFC tags/readers via passwords or cryptographyClick to view →. EV3 uses AES-128 and SCP03.
- Cost differential: EV3 costs 4–6× more than DESFire Light at volume.
- Memory: EV3 up to 32 KB; DESFire Light 640 bytes.
Technical Comparison
| Parameter | MIFARE DESFire EV3 | MIFARE DESFire Light |
|---|---|---|
| Memory | 2–32 KB | 640 bytes |
| Security | AES-128, SCP03 | AES-128, LRP |
| SDM | Yes | No |
| Transaction MAC | Yes | No |
| Proximity Check | Yes | No |
| SFI | Yes | No |
| Applications | Multiple | Single |
| Target lifecycle | Multi-year | Disposable |
| Typical cost (volume) | $0.60–$1.20 | $0.12–$0.28 |
Use Cases
DESFire EV3
National transit programs, corporate multi-application access cards, government employee ID, luxury brand anti-counterfeiting via SDM, programs with SCP03 remote key management.
DESFire Light
Single-journey transit tickets, event wristbands, loyalty stamp cards, micropayment tokens where AES security is required but multi-application and advanced features are not.
Verdict
Different deployment tiers. Use EV3 for long-lived, feature-rich, multi-application card credentials. Use DESFire Light for cost-sensitive disposable single-application tickets. A transit operator can deploy both: EV3 for annual passes, DESFire Light for single-ride tickets.
推荐
Choose MIFARE DESFire EV3 when you need latest DESFire with Secure Channel Protocol; choose MIFARE DESFire Light when you need DESFire security in a cost-optimized package.