MIFARE DESFire EV3

MIFARE DESFire EV3: 7 Powerful Reasons It’s the Best Smart Card Technology in 2026

NXP MIFARE DESFire EV3 Smart Card IC

MIFARE DESFire EV3 — NXP’s most secure contactless smart card IC for multi-application use (Alt: MIFARE DESFire EV3 contactless smart card IC).

Features

RF interface: ISO/IEC 14443 Type A

• Contactless interface compliant with ISO/IEC 14443-2/3 A
• Low Hmin enabling operating distance up to 100 mm (depending on power provided by the PCD and antenna geometry)
• Fast data transfer: 106 kbit/s, 212 kbit/s, 424 kbit/s, 848 kbit/s
• 7 bytes unique identifier (option for Random ID)
• Uses ISO/IEC 14443-4 transmission protocol
• Configurable FSCI to support up to 256 bytes frame size

Non-volatile memory

• 2kB, 4kB, 8kB and 16 kb
• Data retention of 25 years
• Write endurance typical 1 000 000 cycles
• Fast programming cycles

NV-memory organization and multi-application support

• Flexible file system: user can freely define application structures on PICC
• As many applications as memory size supports
• Up to 32 files in each application (6 file types available: Standard Data file, Back-up Data file, Value file, Linear Record file, Cyclic Record file and Transaction MAC file)
• File size is determined during creation (not for Transaction MAC file)
• MlsmartApp (Delegated Application Management)
• Memory reuse in DAM applications (Format Application)
• Factory loaded NXP’s DAM keys for AppXplorer service support
• Accessing files from any two applications during a single transaction

Security and Privacy

• Common Criteria certification: EAL5+ (Hardware and Software)
• Unique 7 bytes serial number for each device
• Optional “RANDOM” ID for enhanced security and privacy
• Mutual three-pass authentication
• Mutual authentication according to ISO/IEC 7816-4
• Flexible key management: 1 card leader key and up to 14 keys per application
• Multiple key assignment for each file access rights (up to 8)
• Multiple Key Sets per application with fast key rolling mechanism (up to 16 sets)
• Hardware DES using 56/112/168 bit keys featuring key version
• Hardware AES using 128-bit keys featuring key version
• Data authenticity by 8 byte CMAC
• MF3ICD40 compatible mode: 4 byte MAC, CRC 16
• Data encryption on RF-channel
• Authentication on application level
• Hardware exception sensors
• Self-securing file system
• Transaction MAC signed with secret key per application
• Virtual Card Architecture for enhanced card/application selection on multi-VC devices with privacy protection
• Proximity Check for protection against Relay Attacks
• Originality Check for proof of genuine NXP’s product

ISO/IEC 7816 compatibility

• Supports ISO/IEC 7816-4 file structure (selection by File ID or DF name)
• Supports ISO/IEC 7816-4 APDU message structure
• Supports ISO/IEC 7816-4 APDU wrapper for MIFARE DESFire native commands
• Supports ISO/IEC 7816-4 INS code ‘A4’ for SELECT FILE
• Supports ISO/IEC 7816-4 INS code ‘BO’ for READ BINARY
• Supports ISO/IEC 7816-4 INS code ‘D6’ for UPDATE BINARY
• Supports ISO/IEC 7816-4 INS code ’62’ for READ RECORDS
• Supports ISO/IEC 7816-4 INS code ‘E2’ for APPEND RECORD
• Supports ISO/IEC 7816-4 INS code ’88’ for INTERNAL AUTHENTICATE
• Supports ISO/IEC 7816-4 INS code ’82’ for EXTERNAL AUTHENTICATE

Special features

• Transaction-oriented automatic anti-tear mechanism with new transaction timer support
• Configurable ATS information for card personalization
• Backward compatibility mode to MIFARE DESFire EV2, EV1 and D40 (MF3ICD40)
• Secure Unique NFC (SUN) enabled by Secure Dynamic Messaging (SDM) which is mirrored as text into the NDEF message (compatible with NTAG DNA)
• Optional high input capacitance (70 pF) for small form factor designs (MF3DHx3)

What is MIFARE DESFire EV3?

MIFARE DESFire EV3 is the latest and most advanced generation of the NXP Semiconductors MIFARE contactless smart card IC family. Designed for high-security, multi-application environments, it delivers exceptional performance across access control, public transportation, loyalty programs, and electronic identity systems.

Building on the proven foundation of DESFire EV1 and EV2, the MIFARE DESFire EV3 adds Transaction MAC, Secure Unique NFC Message (SUN), and enhanced cryptographic capabilities — making it the undisputed choice for modern deployments in India and worldwide.

7 Powerful Features of MIFARE DESFire EV3

The MIFARE DESFire EV3 is packed with cutting-edge capabilities that set it apart from every other contactless smart card IC in the market today.

Transaction MAC

Provides strong mutual authentication and protects every transaction against manipulation.

SUN Feature

Secure Unique NFC Message enables tap-to-phone experiences without a reader.

AES-128 Security

Industry-standard AES encryption with 3DES and DES backward compatibility.

3 Memory Options

Available in 2 KB, 4 KB, and 8 KB EEPROM for flexible application design.

Additionally, the MIFARE DESFire EV3 offers an extended 25-year data retention rate and a write endurance of 500,000 cycles — making it highly reliable for long-term deployments in demanding environments like Indian metro rail networks and large corporate campuses.

MIFARE DESFire EV3 vs EV2: Key Differences

Upgrading from EV2 to MIFARE DESFire EV3? Here is a quick side-by-side comparison of the two generations to help you make an informed decision.

Feature	DESFire EV2	DESFire EV3
Transaction MAC	✗ No	✔ Yes
SUN (Tap-to-phone)	✗ No	✔ Yes
AES-128 Encryption	✔ Yes	✔ Yes (Enhanced)
Virtual Card Architecture	✔ Yes	✔ Yes
Common Criteria EAL5+	✗ EAL4+	✔ EAL5+
ISO 14443-4 Compliant	✔ Yes	✔ Yes

The verdict is clear: MIFARE DESFire EV3 delivers a significantly elevated security profile, especially with its Common Criteria EAL5+ certification — the highest level achievable for a contactless card IC.

Comparison Table

	MIFARE DESFire EV3	MIFARE DESFire EV2	MIFARE DESFire EV1
ISO/IEC 14443 A 1-4	Yes	Yes	Yes
ISO/IEC 7816-4 support	Extended	Extended	Extended
EEPROM data memory	2/4/8/16KB	2/4/8/16/32KB	2/4/8KB
Flexible file structure	Yes	Yes	Yes
NFC Forum Tag Type 4	Yes	Yes	Yes
Unique ID	7B UID or 4B RID	7B UID or 4B RID	7B UID or 4B RID
Number of applications	As many as memory size supports	As many as memory size supports	28
Number of files per app	32	32	32
Data rates supported	Up to 848 Kbit/s	Up to 848 Kbit/s	Up to 848 Kbit/s
Crypto algorithms supported	DES/2K3DES/ 3K3DES/ AES128	DES/2K3DES/ 3K3DES/ AES128	DES/2K3DES/ 3K3DES/ AES128
CC certification (HW+SW)	EAL 5+	EAL 5+	EAL 4+
Delegated Application Management (Multi-Application)	Yes, preloaded keys	Yes	–
SUN (Secure Unique NFC Message)	Yes, compatible with NTAG DNA	–	–
Transaction MAC per app	Yes	Yes	–
Multiple keysets per app	Up to 16 keysets	Up to 16 keysets	–
Multiple file access rights	Up to 8 keys	Up to 8 keys	–
Inter-app file sharing	Yes	Yes
Transaction Timer	Yes	–	–
Virtual Card Architecture	Yes	Yes	–
Proximity Check	Yes	Yes	–
Delivery types	Wafer, MOA4 and MOA8	Wafer, MOA4 and MOB6	Wafer, MOA4 and MOA8

Top Applications of MIFARE DESFire EV3 in India & Globally

MIFARE DESFire EV3 in Metro & Access Control

MIFARE DESFire EV3 powering metro ticketing, access control, and contactless payment systems across India and the world (Alt: MIFARE DESFire EV3 metro access control applications India).