hardware noise sources in FCS_RBG.3 and FCS_RBG.4 #82
Description
Since the PP says the TOE is software-only by definition (section 1.3) there is never a situation where the TOE boundary includes hardware, and therefore the hardware selections in FCS_RBG.3 and .4 shouldn't be available to choose. If the TOE obtains hardware entropy data for the purpose of seeding it would have to come from outside the TOE boundary and would therefore be covered by FCS_RBG.2. Note that the App PP handles these requirements the same way.
The selections and app notes have been updated to clarify this.