everything we need to authenticate the msg should exist in the msg. sig => timestamp, hash