{"id":1170,"date":"2025-06-01T08:21:46","date_gmt":"2025-06-01T08:21:46","guid":{"rendered":"https:\/\/kourentzes.com\/konstantinos\/?p=1170"},"modified":"2025-06-01T11:37:24","modified_gmt":"2025-06-01T11:37:24","slug":"1356mhz-nfc-tags-guide","status":"publish","type":"post","link":"https:\/\/kourentzes.com\/konstantinos\/index.php\/2025\/06\/01\/1356mhz-nfc-tags-guide\/","title":{"rendered":"Demystifying 13.56 MHz NFC Tags"},"content":{"rendered":"

This deep-dive unpacks the 13.56 MHz tag universe\u2014from 1990s MIFARE Classics to today\u2019s AES-secured DESFire\u2014explaining standards, security pitfalls, antenna tuning and how to pick the right chip for phones, payments, IoT or long-range inventory. <\/p><\/div>\n\n\n

\n\n\n\n

1. HF & Near-Field 101<\/h2>\n\n\n\n

All tags discussed here are passive transponders<\/strong> that harvest energy from the 13.56 MHz carrier produced by the reader. Inductive coupling limits range to a few centimetres but enables a bi-directional, ISO-layered link that can move up to 848 kbit s\u207b\u00b9. Emutag<\/a><\/p>\n\n\n\n

\n

Analogy:<\/strong> Think of the reader as a wireless charging pad that also chats with the gadget it powers.<\/p>\n<\/blockquote>\n\n\n\n

\n\n\n\n

2. A Short History of 13.56 MHz Tags<\/h2>\n\n\n\n
Year<\/th>Milestone<\/th>Why it matters<\/th><\/tr><\/thead>
1994<\/strong><\/td>Sony launches FeliCa<\/strong><\/td>First mass NFC ticket system (Hong Kong Octopus).<\/td><\/tr>
1995<\/strong><\/td>ISO\/IEC 14443-A\/B ratified<\/td>Defines proximity-card PHY & anti-collision. Emutag<\/a><\/td><\/tr>
2002<\/strong><\/td>MIFARE Classic 1 K<\/strong> dominates transit & access<\/td>Cheap, 1 KiB, Crypto-1.<\/td><\/tr>
2008<\/strong><\/td>Crypto-1 publicly cracked<\/td>Cards cloneable in minutes. Cryptology ePrint Archive<\/a><\/td><\/tr>
2010<\/strong><\/td>NFC Forum finalises Tag Types 1-4<\/strong><\/td>Phones can now talk to almost everything. NFC Forum<\/a><\/td><\/tr>
2013<\/strong><\/td>NTAG21x<\/strong> line appears<\/td>Universal, NDEF-ready, >7 cm read range. NXP Semiconductors<\/a><\/td><\/tr>
2020<\/strong><\/td>DESFire EV3<\/strong> ships<\/td>AES-128, secure channel, transaction MAC.<\/td><\/tr>
2024<\/strong><\/td>ISO\/IEC 15693-3 (vicinity) refreshed<\/td>Adds random UID, tamper status. cdn.standards.iteh.ai<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

3. Standards Landscape<\/h2>\n\n\n\n
Layer<\/th>HF \u201cDialect\u201d<\/th>NFC-Forum Tag Types<\/th>Key Chips<\/th><\/tr><\/thead>
ISO\/IEC 14443-A<\/strong><\/td>Miller, ASK, 106 kBd<\/td>Type 2<\/strong> (NTAG, Ultralight), Type 4<\/strong> (DESFire)<\/td>NTAG213\/215\/216, MIFARE DESFire EV2\/EV3<\/td><\/tr>
ISO\/IEC 14443-B<\/strong><\/td>NRZ-L, ASK, 106 kBd<\/td>Type 4<\/strong><\/td>ST25TB512, Infineon CIPURSE<\/td><\/tr>
JIS X 6319-4 (FeliCa)<\/strong><\/td>Manchester, 212\u2013424 kBd<\/td>Type 3<\/strong><\/td>Sony RC-S965<\/td><\/tr>
ISO\/IEC 15693<\/strong><\/td>Single\/Bi-sub-carrier, 26\u201353 kBd<\/td>Type 5<\/strong><\/td>ICODE SLIX, ST25DV, NXP TagTamper NXP Semiconductors<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

MIFARE Classic talks ISO\/IEC 14443-A only for the anti-collision and RF layer<\/strong>; its higher-layer commands are proprietary and not in any NFC-Forum Tag Type. That is why many modern phones refuse to write it.<\/p>\n\n\n\n

\n\n\n\n

4. Inside the Silicium<\/h2>\n\n\n\n

4.1 Memory & Security Cheat-Sheet<\/h3>\n\n\n\n
Family<\/th>EEPROM<\/th>Security<\/th>Typical Use<\/th><\/tr><\/thead>
MIFARE Classic 1 K<\/strong><\/td>1 KiB (16 \u00d7 4 \u00d7 16 B)<\/td>Crypto-1 (broken)<\/td>Legacy turnstiles, hotel doors NXP Semiconductors<\/a><\/td><\/tr>
NTAG213<\/strong><\/td>144 B NDEF<\/td>32-bit password (optional)<\/td>Smart posters, vCards NXP Semiconductors<\/a><\/td><\/tr>
DESFire EV3 4 K<\/strong><\/td>Up to 32 files \/ 4 KiB<\/td>AES-128\/192\/256, Secure Channel<\/td>Ticketing, payments<\/td><\/tr>
ICODE SLIX2<\/strong><\/td>2.5 KiB<\/td>32-bit password<\/td>Inventory up to 1 m NXP Semiconductors<\/a><\/td><\/tr>
FeliCa RC-S965<\/strong><\/td>1 KiB blocks<\/td>3DES\/AES optional<\/td>Transit in Japan<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

4.2 Best-practice Checklist<\/h3>\n\n\n\n
Layer<\/th>Pitfall<\/th>Fix<\/th><\/tr><\/thead>
RF tuning<\/strong><\/td>Small antennas detune near metal<\/td>Use ferrite backing or add \u03c0-match.<\/td><\/tr>
Keys<\/strong><\/td>Default keys (FFFFFFFFFFFF<\/code>) on Classic<\/td>Rotate strong random keys; store off-card.<\/td><\/tr>
Anti-tear<\/strong><\/td>EEPROM corruption on power loss<\/td>Enable transaction MAC (DESFire EV3) or write-dual-detect bits.<\/td><\/tr>
UID privacy<\/strong><\/td>Static UID leaks identity<\/td>Choose random UID variants or four-byte cascade with ISO\/IEC 7816 SELECT.<\/td><\/tr>
Cloning<\/strong><\/td>Classic easily duplicated<\/td>Migrate to NTAG\/DESFire; enable Trinity-MPC readers that gate by chip ATS.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

4.3 Performance Benchmarks & Latency Numbers<\/h3>\n\n\n\n
Tag family<\/th>Air-interface(s)<\/th>Max raw bitrate*<\/th>Typical \u201cGET VERSION\u201d (RATS + READ) latency<\/th>Mutual-auth + credit-debit (full transaction)<\/th><\/tr><\/thead>
NTAG213<\/strong><\/td>ISO 14443-A 106 kbit\/s<\/td>106 kbit\/s<\/td>\u2248 2 \u2013 3 ms read<\/strong>; write 3 \u2013 5 ms<\/td>N\/A \u2013 no crypto nxp.com.cn<\/a>Amazon<\/a><\/td><\/tr>
MIFARE Classic 1 K<\/strong><\/td>ISO 14443-A 106 kbit\/s<\/td>106 kbit\/s<\/td>\u2248 5 ms (plus 2 \u00d7 16-byte reads)<\/td>\u2248 80 ms (Crypto-1, 3-pass)<\/td><\/tr>
DESFire EV3<\/strong><\/td>ISO 14443-A 106\/212\/424\/848 kbit\/s<\/td>848 kbit\/s<\/td>\u2248 1.2 ms (at 848 kbit\/s)<\/td>\u2248 25 ms (AES-128 mutual auth + value-file debit) NXP Semiconductors<\/a>TagtixRFID<\/a><\/td><\/tr>
ICODE SLIX2<\/strong><\/td>ISO 15693 26\/53 kbit\/s<\/td>53 kbit\/s<\/td>\u2248 4 ms over 30 cm<\/td>Simple pwd protect; full trans. not typical NXP Semiconductors<\/a>NXP Semiconductors<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

*Max bitrate depends on reader support and antenna tuning; real-world buses often cap DESFire at 424 kbit\/s to maximise link budget.<\/p>\n\n\n\n

\n

Analogy:<\/strong> Think of Classic as a one-lane bridge, DESFire EV3 as a four-lane expressway, and ISO 15693 as a scenic country road\u2014slower but stretching kilometres instead of metres.<\/p>\n<\/blockquote>\n\n\n\n

\n\n\n\n

4.4 Energy Harvesting & Dual-Interface Memory<\/h3>\n\n\n\n

Certain HF chips ship with a power-out<\/em> pin that siphons a few milliwatts from the RF field\u2014enough to wake a microcontroller, flash an LED or power a BLE beacon during commissioning:<\/p>\n\n\n\n

IC<\/th>Harvest power<\/th>Extras<\/th>Typical use<\/th><\/tr><\/thead>
ST25DV-I2C<\/strong><\/td>3.3 V @ ~5 mA burst<\/td>Mailbox for MCU ↔ NFC<\/td>Smart-home sensors, e-paper labels<\/td><\/tr>
NTAG 5 Link<\/strong><\/td>5 V @ 10 mA peak<\/td>PWM\/ADC, SPI bridge<\/td>Wearables, coil-less USB-C dongles<\/td><\/tr>
DESFire EV3<\/strong><\/td>n\/a (no pin-out)<\/td>On-chip \u201cproximity check\u201d to kill relay attacks<\/td>EV-charging, payments<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Best practices:<\/p>\n\n\n\n

    \n
  • Clamp the current.<\/strong> RF harvest collapses above \u224810 mA; add a super-cap if start-up surge exceeds budget.<\/li>\n\n\n\n
  • Keep antenna Q-factor moderate (Q\u224825).<\/strong> High-Q coils ring for milliseconds, starving the regulator during load transients.<\/li>\n\n\n\n
  • Gate A-to-D traffic.<\/strong> The ST25DV mailbox can back-pressure an I\u00b2C master; budget 0.5 ms per 32-byte burst to avoid field drop-outs.<\/li>\n<\/ul>\n\n\n\n
    \n\n\n\n

    4.5 File Systems, Transaction Counters & Anti-Tear<\/h3>\n\n\n\n
    Tag<\/th>File abstraction<\/th>Built-in anti-tear<\/th>Extras<\/th><\/tr><\/thead>
    MIFARE Classic<\/strong><\/td>Sector-level only<\/td>None; last write wins<\/td>One byte \u201cvalue block\u201d trick to fake counters.<\/td><\/tr>
    DESFire EVx<\/strong><\/td>Up to 28 files: Std-data, Cyclic, Value, Backup<\/td>Atomic two-step commit, optional Transaction MAC<\/td>16-bit or 32-bit trans. counters per file.<\/td><\/tr>
    ICODE SLIX2<\/strong><\/td>320 blocks (4 B)<\/td>Block lock bits<\/td>Optional Tamper Status byte for seals.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Design tip:<\/strong> For stored-value (e-wallet) use a cyclic record file<\/em> on DESFire: every debit\/appended record includes a 32-bit monotonic counter, which preserves forensic history even if power dies mid-update.<\/p>\n\n\n\n

    5. Decision Matrix<\/h2>\n\n\n\n

    5.1 Selecting by Threat Model<\/h3>\n\n\n\n
    Threat actor<\/th>Attack vector<\/th>Tag families that resist<\/th>Mitigation knobs<\/th><\/tr><\/thead>
    Casual copier<\/strong> (Android + Proxmark)<\/td>Read UID + sector dump<\/td>Any AES tag<\/em> (DESFire, FeliCa DS)<\/td>Random UID, PICC keys diversified with card UID.<\/td><\/tr>
    Relay mafia<\/strong> (2 \u00d7 RPi + Wi-Fi)<\/td>50 cm relay of RF dialogue<\/td>DESFire EV3 with Proximity Check<\/em><\/td>Check fails if RTT > 2 \u00b5s.<\/td><\/tr>
    State actor<\/strong><\/td>Full lab, side-channel<\/td>CIPURSE S, Infineon SLE77<\/td>CC EAL6+, LASER fault sensors<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    5.2 Cost vs. Capability Curve<\/h3>\n\n\n\n
    Price (1 k units)<\/th>What you get<\/th><\/tr><\/thead>
    \u20ac0.17 \u2013 0.25<\/strong><\/td>NTAG213\/Ultralight-C; no crypto, just password<\/td><\/tr>
    \u20ac0.40 \u2013 0.60<\/strong><\/td>NTAG424 DNA (AES-128, Secure Unique NFC)<\/td><\/tr>
    \u20ac0.70 \u2013 1.40<\/strong><\/td>DESFire EV2\/EV3 2 K-8 K (AES-128\/192\/256, file system)<\/td><\/tr>
    \u20ac0.90 \u2013 1.30<\/strong><\/td>ST25DV-I2C (energy harvesting, NDEF mailbox)<\/td><\/tr>
    \u20ac1.50 +<\/strong><\/td>FeliCa DS RC-S967 (AES, <1 ms polling)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Rule of thumb:<\/strong> Double the security halves the battery you\u2019ll spend on brute-forcing it later.<\/em><\/p>\n\n\n\n

    \n\n\n\n

    5.3 Lifecycle & Field-Upgrade Paths<\/h3>\n\n\n\n
      \n
    1. Phase-in cards first, readers later<\/strong> \u2013 DESFire can impersonate Classic sectors (so-called migratable configuration<\/em>) letting you swap tokens without bricking old turnstiles.<\/li>\n\n\n\n
    2. Reader firmware OTA<\/strong> \u2013 modern BLE\/Wi-Fi readers allow RF-stack updates; budget 10 MB cellular data per remote site.<\/li>\n\n\n\n
    3. Key-roll protocol<\/strong> \u2013 rotate PICC\/Master keys every 24 months; store derivation keys in an HSM, never on the PC that compiles badges<\/em>.<\/li>\n<\/ol>\n\n\n\n
      \n

      Out-of-the-box idea:<\/strong> Offer employees post-quantum<\/em> firmware coupons\u2014when NIST approves LMS\/MSS, your badges can OTA-upgrade to hash-based signatures without re-printing plastic.<\/p>\n<\/blockquote>\n\n\n\n

      \n\n\n\n

      5.4 Software Stack Blueprint<\/h3>\n\n\n\n
      <\/circle><\/circle><\/circle><\/g><\/svg><\/span>