ed25519 key verification is malleable

[paulmillr]

The cryptography module tweetnacl you're using allows forged signatures.

Suggest to switch to https://github.com/paulmillr/noble-curves or https://github.com/paulmillr/ed25519-keygen