Yes and yes, the SDK has esp_random() and esp_fill_random() which hook into the hardware RNG.