NXP Semiconductors has launched MIFARE DUOX, a new NFC contactless IC that brings together asymmetric and symmetric cryptography on a single chip for the first time. The product is aimed squarely at simplifying authentication for EV charging stations, secure car access, and multi-application smart card deployments.
At the heart of MIFARE DUOX is a dual cryptography engine that combines elliptic curve cryptography (ECC) with AES-256 symmetric encryption. This pairing allows the chip to handle both PKI-based authentication and fast symmetric session encryption without needing separate security elements. For system integrators, that means simpler key management and fewer components in the signal chain.
The security credentials are serious. MIFARE DUOX carries Common Criteria EAL 6+ certification across both hardware and software layers, placing it among the most rigorously evaluated contactless ICs on the market. It also includes a Proximity Check feature designed to defeat relay attacks, along with Transaction Signature capability that cryptographically proves the authenticity of each NFC transaction.
For the EV charging sector specifically, NXP has developed dedicated “MIFARE DUOX EV” part types that ship with a preinstalled EV charging application, a ready-made file structure, and preinjected key material and certificates. These parts support user authentication compliant with VDE-AR-E 2532-100, the German standard for NFC-based EV charging identification. The authentication uses ECDSA-256 with the brainpoolP256r1 curve and SHA256 hashing, and crucially, smart card certificate validation happens in the online backend system rather than in the NFC reader firmware at the charging station itself. This simplifies the reader hardware and reduces the attack surface at the point of use.
The chip is built for harsh environments, with an operating range of -40°C to +105°C, making it suitable for outdoor charging infrastructure and automotive applications. It is also compliant with ISO/SAE 21434 for automotive cybersecurity and follows MISRA-C coding standards.
Beyond EV charging, MIFARE DUOX supports a flexible file system architecture that allows applications to be installed after the card has been issued. A single NFC-enabled smart card can host multiple applications from different service providers, covering corporate access control, EV charging authentication, user authorization, and loyalty programmes. This multi-application capability could reduce the number of physical credentials that end users need to carry.
“In fast-growing verticals like EV charging authentication or secure car access, we’re enabling the industry to reduce the complexity of key distribution and management, without compromising on contactless transaction speed or product versatility,” said Andre Perchthaler, Senior Director, MIFARE at NXP.
The launch positions NXP to compete in the growing intersection of NFC technology and electric vehicle infrastructure, where secure and standardised authentication is becoming a critical requirement as public charging networks expand across Europe and beyond.
Read more at https://www.nxp.com/company/about-nxp/newsroom/NW-NXP-SIMPLIFIES-NFC-SECURITY-WITH-MIFARE