stf on Nostr: Every record also contains an authorization pubkey, which is dependent on the account ...

Every record also contains an authorization pubkey, which is dependent
on the account key and the record id, thus each record as a unique key
pair. the key pair is generated as follows:

sign_seed = h(h(dst_signkey, account_key), id)

pk, sk = crypto_sign_seed_keypair (sign_seed)

where H is a keyed hash, and dst_signkey is a domain separation tag.

3/5