NTAG213 vs MIFARE DESFire Light

NTAG213 vs MIFARE DESFire Light: Open Tag vs. Lightweight Secure Ticket

NTAG213 is the default choice for open consumer NFC. MIFARE DESFire Light is a stripped-down, cost-optimized version of DESFire EV2 designed specifically for transit micropayment and limited-use ticketing where Crypto-1Crypto-1Broken proprietary cipher in MIFARE Classic (reverse-engineered 2008)View full → risks are unacceptable but full DESFire overhead is unnecessary.

Overview

NTAG213 offers 144 bytes of NDEF storage with no crypto. Readable by any smartphone, it is the cheapest way to deliver a URL or contact card via NFC.

MIFARE DESFire Light offers 640 bytes organized in a simplified file structure with AES-128 authenticationauthenticationIdentity verification of NFC tags/readers via passwords or cryptographyView full → — the same cipher as full DESFire but with a reduced application model: one application, up to five files, and a fixed key structure. This design targets single-purpose transit tickets, where the lower die cost compared to full DESFire is justified by sacrificing multi-application flexibility.

Key Differences

• Security: NTAG213 — password only. DESFire Light — AES-128 mutual authenticationmutual authenticationTwo-way identity verification between reader and tagView full →, encrypted communication. Real cryptographic protection against cloning and eavesdropping.
• Memory: NTAG213 — 144 bytes. DESFire Light — 640 bytes (one application, up to 5 files).
• Application model: DESFire Light supports only a single application (vs. 28 for full DESFire). This makes it inexpensive but inflexible.
• Use-case fit: NTAG213 — open data carrier. DESFire Light — secure single-use or limited-use transit ticket with real cryptography.
• Smartphone readability: NTAG213 — native NDEF. DESFire Light — requires dedicated reader infrastructure.
• Price: DESFire Light sits between Ultralight EV1 and full DESFire EV2 — typically 2–5× the cost of NTAG213.

Use Cases

Choose NTAG213 when: Open, smartphone-readable NDEF delivery; no security needed.

Choose MIFARE DESFire Light when: - A secure, cryptographically authenticated single-application ticket is required - Cost must be lower than full DESFire but security must exceed MIFARE Classic - Transit micropayment or limited-trip ticketing is the primary use case

Verdict

NTAG213 is for consumer data delivery. DESFire Light is for single-application secure ticketing where full DESFire is cost-prohibitive. The security gap between them is vast — DESFire Light provides genuine AES-128 protection while NTAG213 provides none. The right choice depends entirely on whether authentication is a functional requirement.