NXP Semiconductors

MF3D(H)x2

MIFARE DESFire EV2 contactless multi-application IC

MF3Dx2_MF3DHx2_SDS

All information provided in this document is subject to legal disclaimers.

© NXP B.V. 2019. All rights reserved.

Product short data sheet

Rev. 3.2 — 12 June 2019

COMPANY PUBLIC

364232

14 / 27

result in the following options of secure communication between MIFARE DESFire EV2

and PCD:

• Plain data transfer (only possible within the backwards-compatible mode to MF3ICD40

and EV2 secure messaging)

• Plain data transfer with cryptographic checksum (MAC): Authentication with

backwards-compatible mode to MF3ICD40: 4 byte MAC; All other authentications

based on DES/3DES/AES: 8 byte CMAC

• Encrypted data transfer (secured by CRC before encryption): Authentication with

backwards-compatible mode to MF3ICD40: A 16-bit CRC is calculated over the stream

and attached. The resulting stream is encrypted using the chosen cryptographic

method. All other authentications-based DES/3DES/AES: A 32-bit CRC is calculated

over the stream and attached. The resulting stream is encrypted using the chosen

cryptographic method. A cryptographic checksum (CMAC) will also be attached when

using EV2 secure messaging.

Find more information on the security concept of the product in [1]. Be aware not all

levels of security are recommended. For new design, the EV2 secure messaging is

recommended.