The cryptography module `tweetnacl` you're using allows forged signatures. Suggest to switch to https://github.com/paulmillr/noble-curves or https://github.com/paulmillr/ed25519-keygen