MIFARE DESFire EV2 vs MIFARE DESFire EV3

Compare NXP DESFire EV2 and EV3: EV3 adds Secure Dynamic Messaging, doubles write cycles to 1M, and eliminates 32 kB option. Both offer AES-128 and EAL5+ security.

Side-by-side specs

Frequency
Protocol
MIFARE DESFire EV2
ISO/IEC 14443-A (all levels), ISO/IEC 14443-4, ISO/IEC 7816-4 (partial), NFC compatible
MIFARE DESFire EV3
ISO/IEC 14443-2/3/4 Type A, ISO/IEC 7816-4 APDU, NFC Forum Type 4 Tag
Memory
MIFARE DESFire EV2
2 kB, 4 kB, 8 kB, 16 kB, or 32 kB EEPROM (data retention 25 years, 500,000 write cycles typical)
MIFARE DESFire EV3
2 kB, 4 kB, 8 kB, or 16 kB EEPROM (data retention 25 years, 1,000,000 write cycles typical)
Interface
MIFARE DESFire EV2
RF contactless (106, 212, 424, 848 kbit/s)
MIFARE DESFire EV3
RF contactless (106–848 kbit/s)
Temp Range
MIFARE DESFire EV2
-25°C to +70°C ambient, -55°C to +125°C storage
MIFARE DESFire EV3
-25°C to +85°C (operating), -55°C to +125°C (storage)
Form Factor
MIFARE DESFire EV2
FFC wafer (8-inch 75/120 µm or 12-inch 75/150 µm thickness), MOA4 module (SOT500-2), MOB6 module (SOT500-3); standard (17 pF) or high (70 pF) input capacitance variants
MIFARE DESFire EV3
FFC wafer (120 µm), MOA4 (SOT500-2), MOA8 (SOT500-4); 17 pF or 70 pF antenna capacitance variants
Security
MIFARE DESFire EV2
Common Criteria EAL5+ certified; AES-128, 3DES (3KTDEA, 168-bit), 2KTDEA (112-bit), Single DES (56-bit); CMAC (8 bytes); mutual three-pass authentication; Random ID option; ECC…
MIFARE DESFire EV3
AES-128, 3DES (56/112/168-bit), CMAC, originality signature (ECC), Common Criteria EAL5+ certified, proximity check, transaction MAC, secure dynamic messaging (SDM), random UID

Verdict

Choose MIFARE DESFire EV2 if you need maximum memory capacity up to 32 kB EEPROM, as this variant is only available in the EV2 generation. Both chips operate at 13.56 MHz with ISO/IEC 14443 Type A and support the same data rates from 106 to 848 kbit/s. The EV2 provides Common Criteria EAL5+ certified security with AES-128, 3DES (56/112/168-bit), mutual three-pass authentication, transaction MAC, proximity check, random ID, and hardware exception sensors. Memory endurance is rated at 500,000 write cycles with 25-year data retention. If your application requires proven high-security features like transaction MAC for preventing relay attacks and you need larger memory configurations, EV2 remains a solid choice. It supports ISO/IEC 7816-4 commands partially and is fully NFC compatible. Choose MIFARE DESFire EV3 if you require Secure Dynamic Messaging (SDM/SUN) for dynamic URL generation, which enables use cases like tap-to-verify authentication without backend decryption. The EV3 doubles memory endurance to 1,000,000 write cycles compared to EV2's 500,000 cycles, making it better suited for high-frequency write applications such as transport ticketing. Memory options range from 2 kB to 16 kB (the 32 kB variant is not offered in EV3). The EV3 retains all EV2 security features including AES-128, 3DES, CMAC, transaction MAC, proximity check, random UID, and ECC originality signatures, all under Common Criteria EAL5+ certification. The addition of secure dynamic messaging and NFC Forum Type 4 Tag compliance make EV3 the preferred choice for modern applications requiring dynamic authentication, anti-counterfeiting via mobile verification, and improved memory durability. The same 13.56 MHz frequency and ISO/IEC 14443-2/3/4 Type A protocol ensure backward compatibility with existing infrastructure.

FAQ

What is the main difference between DESFire EV2 and EV3?

DESFire EV3 adds Secure Dynamic Messaging (SDM/SUN) for dynamic URL generation and doubles write endurance to 1,000,000 cycles versus EV2's 500,000. EV3 does not offer a 32 kB memory variant, maxing out at 16 kB while EV2 goes up to 32 kB.

Does DESFire EV3 support the same security features as EV2?

Yes, DESFire EV3 supports all EV2 security features including AES-128, 3DES, transaction MAC, proximity check, random UID, ECC originality signatures, and Common Criteria EAL5+ certification, while adding Secure Dynamic Messaging capability.

Which DESFire chip is better for transport ticketing applications?

DESFire EV3 is better suited for transport ticketing due to its doubled write endurance of 1,000,000 cycles versus EV2's 500,000 cycles, and the addition of Secure Dynamic Messaging for enhanced security and user verification features.

Sourcing either chip in volume? Talk to Roxtron

Need a custom RFID product?

Roxtron manufactures a wide range of custom RFID and NFC products including smart cards, labels, wristbands, key fobs and industrial tags. Contact us to discuss your project and we'll respond within 24 hours.