Correct; after the newer seeding policies have taken affect, many have punted to the OS/app for seeding. See https://csrc.nist.gov/CSRC/media/projects/cryptographic-modu... -- the entropy input is plaintext via API, but still needs to be from an approved source via 90B I believe, so likely means their Android kernel is also certified or they maintain something like JitterEntropy for that.
The older e.g., 36xx series Google cert predates that requirement iirc, when you could seed from a non-FIPS kernel.
Comments
Correct; after the newer seeding policies have taken affect, many have punted to the OS/app for seeding. See https://csrc.nist.gov/CSRC/media/projects/cryptographic-modu... -- the entropy input is plaintext via API, but still needs to be from an approved source via 90B I believe, so likely means their Android kernel is also certified or they maintain something like JitterEntropy for that.
The older e.g., 36xx series Google cert predates that requirement iirc, when you could seed from a non-FIPS kernel.
Thanks. This explains the Common Criteria entropy assessment.