improve p2p stack (#1755)

* optimize p2p network layer

Signed-off-by: ozkanonur <work@onurozkan.dev>

* update default gas limit for tendermint

Signed-off-by: ozkanonur <work@onurozkan.dev>

* rollback topic limit

Signed-off-by: ozkanonur <work@onurozkan.dev>

* remove unused arg from `lp_ordermatch::process_msg`

Signed-off-by: ozkanonur <work@onurozkan.dev>

* use OrderbookP2PHandlerResult for process_orders_keep_alive and process_maker_order_updated

* return one error for failed SwapMsg, SwapStatus deserialization

* fix process_swap_msg in wasm to return error if SwapMsg can't be deserialized

* remove additional space in SwapMsg, SwapStatus decode error message

* roll back crate visibility for new_protocol mod

---------

Signed-off-by: ozkanonur <work@onurozkan.dev>
Co-authored-by: shamardy <shamardy@yahoo.com>

CHANGELOG.md

@@ -9,7 +9,7 @@
 - - Break the loop right after processing any of `SWAP_PREFIX`, `WATCHER_PREFIX`, `TX_HELPER_PREFIX` topic.
 - An issue was fixed where we don't have to wait for all EVM nodes to sync the latest account nonce [#1757](https://github.com/KomodoPlatform/atomicDEX-API/pull/1757)
 - optimized dev and release compilation profiles and removed ci [#1759](https://github.com/KomodoPlatform/atomicDEX-API/pull/1759)
-
+- use OS generated secrets for cryptographically secure randomness in `maker_swap` and `tendermint_coin::get_sender_trade_fee_for_denom` [#1753](https://github.com/KomodoPlatform/atomicDEX-API/pull/1753)
 
 ## v1.0.2-beta - 2023-04-11
 

mm2src/coins/tendermint/tendermint_coin.rs

@@ -62,7 +62,6 @@ use mm2_number::MmNumber;
 use parking_lot::Mutex as PaMutex;
 use primitives::hash::H256;
 use prost::{DecodeError, Message};
-use rand::{thread_rng, Rng};
 use rpc::v1::types::Bytes as BytesJson;
 use serde_json::{self as json, Value as Json};
 use std::collections::HashMap;
@@ -1461,7 +1460,11 @@ impl TendermintCoin {
         amount: BigDecimal,
     ) -> TradePreimageResult<TradeFee> {
         const TIME_LOCK: u64 = 1750;
-        let sec: [u8; 32] = thread_rng().gen();
+
+        let mut sec = [0u8; 32];
+        common::os_rng(&mut sec);
+        drop_mutability!(sec);
+
         let to_address = account_id_from_pubkey_hex(&self.account_prefix, DEX_FEE_ADDR_PUBKEY)
             .map_err(|e| MmError::new(TradePreimageError::InternalError(e.into_inner().to_string())))?;
 
@@ -2627,7 +2630,6 @@ pub mod tendermint_coin_tests {
     use common::{block_on, DEX_FEE_ADDR_RAW_PUBKEY};
     use cosmrs::proto::cosmos::tx::v1beta1::{GetTxRequest, GetTxResponse, GetTxsEventResponse};
     use crypto::privkey::key_pair_from_seed;
-    use rand::{thread_rng, Rng};
     use std::mem::discriminant;
 
     pub const IRIS_TESTNET_HTLC_PAIR1_SEED: &str = "iris test seed";
@@ -2731,7 +2733,11 @@ pub mod tendermint_coin_tests {
         const UAMOUNT: u64 = 1;
         let amount: cosmrs::Decimal = UAMOUNT.into();
         let amount_dec = big_decimal_from_sat_unsigned(UAMOUNT, coin.decimals);
-        let sec: [u8; 32] = thread_rng().gen();
+
+        let mut sec = [0u8; 32];
+        common::os_rng(&mut sec);
+        drop_mutability!(sec);
+
         let time_lock = 1000;
 
         let create_htlc_tx = coin

mm2src/common/common.rs

@@ -138,6 +138,7 @@ use futures01::{future, Future};
 use http::header::CONTENT_TYPE;
 use http::Response;
 use parking_lot::{Mutex as PaMutex, MutexGuard as PaMutexGuard};
+use rand::RngCore;
 use rand::{rngs::SmallRng, SeedableRng};
 use serde::{de, ser};
 use serde_json::{self as json, Value as Json};
@@ -747,6 +748,9 @@ pub fn writeln(line: &str) {
 
 pub fn small_rng() -> SmallRng { SmallRng::seed_from_u64(now_ms()) }
 
+#[inline(always)]
+pub fn os_rng(dest: &mut [u8]) { rand::rngs::OsRng.fill_bytes(dest); }
+
 #[derive(Debug, Clone)]
 /// Ordered from low to height inclusive range.
 pub struct OrdRange<T>(RangeInclusive<T>);

mm2src/mm2_main/src/lp_swap/maker_swap.rs

@@ -31,7 +31,6 @@ use mm2_err_handle::prelude::*;
 use mm2_number::{BigDecimal, MmNumber};
 use parking_lot::Mutex as PaMutex;
 use primitives::hash::{H256, H264};
-use rand::Rng;
 use rpc::v1::types::{Bytes as BytesJson, H256 as H256Json, H264 as H264Json};
 use std::any::TypeId;
 use std::path::PathBuf;
@@ -238,8 +237,11 @@ impl MakerSwap {
     #[inline]
     fn r(&self) -> RwLockReadGuard<MakerSwapMut> { self.mutable.read().unwrap() }
 
-    #[inline]
-    pub fn generate_secret() -> [u8; 32] { rand::thread_rng().gen() }
+    pub fn generate_secret() -> [u8; 32] {
+        let mut sec = [0u8; 32];
+        common::os_rng(&mut sec);
+        sec
+    }
 
     #[inline]
     fn secret_hash(&self) -> Vec<u8> {