Skip to main content
Application NoteNxp

MIFARE SAM AV3 - Host Communication

Technical guide for host-to-MIFARE SAM AV3 communication, covering command sets, plain/MAC/encrypted protection modes, and authentication examples for secure messaging.

View application note

Overview

This application note (AN12704) provides technical details on the communication interface between a microcontroller (host) and the MIFARE SAM AV3 Secure Application Module. It defines various command sets—including Initial, Minimal, General, PL, Limited, and Restricted—available based on the SAM's activation and authentication state. The document details three communication protection levels: Plain, MAC Protection, and Full Protection (encrypted). It includes extensive hex-code examples for implementing host authentication and the ChangeKeyEntry command, specifically demonstrating the use of AES-128 and TDEA for secure end-to-end messaging and session key derivation.

Use Cases

  • Developing secure communication protocols between a host microcontroller and a MIFARE SAM module.
  • Implementing encrypted data exchange and MAC protection for payment or access terminals.
  • Managing and updating cryptographic keys within the MIFARE SAM AV3 secure environment.
  • Designing terminal-to-backend security architectures using X-interface or S-interface configurations.

Topics

MIFARE SAM AV3
TDEA
AES
RSA
Host communication
Secure Application Module
C-APDU
R-APDU
Secure Messaging
Authentication
NXP

Referenced Parts

MIFARE SAM AV3

NXP Semiconductors

This application note addresses different types of communication between host (microcontroller) and MIFARE SAM AV3.

MF4SAM30

NXP Semiconductors

System guidance manual – MF4SAM30 (MIFARE SAM AV3), document number xx.

5-bit

NXP

The SAM AV3 will use the 5-bit NXP device bus address 01010b, with the 2 remaining