SE050 vs MIFARE SAM AV3

[patricio]

Hello, 

So far, we've been working with Mifare Classic 1K cards, but from now on, we'll be using Mifare Plus EV2 and DESFire EV3 cards. We want to add security to our design by implementing a secure element to store the keys, but I'm not sure whether to opt for the SE050 or the SAM AV3. I understand that price is the main advantage of using the SE050. But what does the SAM AV3 offer that justifies paying so much?

We have a signed NDA and have access to the documentation, but the cumbersome datasheets make it difficult for me to make a decision. Would it be correct to say that the Secure Element SE050 only serves to store the keys, while the Mifare SAM AV3, in addition to storing the keys, also facilitates the task of reading and writing cards for the host microcontroller? In other words, when working with SAM AV3 in X mode, I understand that through some commands, the host is relieved from the laborious process of reading/writing on a tag. However, using the SE050 would ensure secure storage of the keys, but the microcontroller would still be responsible for implementing the entire protocol and encryption for reading/writing on the card. Is that correct?

Thank you in advance. 

[Kan_Li]

Hi @patricio ,

SE050 can just support MIFARE DESFire EV2 Key derivation (S-mode). This is limited to AES128 keys only.
The SE05x can be used by a card reader to setup a session where the SE05x stores the master key(s) and the session keys are generated and passed to the host.

If you need more functionalities, please use MIFARE SAM AV3 instead.

Hope that helps,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[patricio]

Hi Kan_Li,

Thank so much for your quick response. So, we could say that the SE050 is a secure element designed for IoT applications, in addition to supporting DESFire EV2 cards, while the MIFARE SAM EV3 supports all MIFARE cards. But can a MIFARE SAM EV3 be used in IoT applications? That is, what is different about the SE050 from the MIFARE SAM EV3 that makes it more appropriate for IoT?

I'm just trying to understand the two components so as not to make a mistake in the choice.
Thank you again. 

[Kan_Li · Accepted solution]

Hi @patricio ,

SE050 is more suitable for IoT applications such as TLS connection, cloud onboarding, device-to-device authentication, device integrity protection, attestation, sensor data protection, Wi-Fi credential protection, secure access to IoT services, IoT device commissioning and personalization. It offers enhanced Common Criteria EAL 6+ and FIPS 140-2 certified security. 

MIFARE SAM EV3 comes with built-in support for NXP’s MIFARE^® ICs and NXP’s NTAG^® DNA, ICODE^® DNA and UCODE^® DNA products. It is an ideal add-on for edge computing nodes and end nodes such as reader and POS terminals, toll gates and door locks. 

In short, they have different target applications in IoT.

Hope that makes sense,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[patricio]

Thank you very much Kan_Li.