You need to include both the message and the private key in the hash. Since signing the same message twice with the same private key produces the same signature

You need to include both the message and the private key in the hash. Since signing the same message twice with the same private key produces the same signature, it doesn't leak any additional information.