In a Bitcoin transaction when you sign an input, the message is the current transaction you are adding the input to, for some reason I always assumed you signed the output you are consuming.
Look up the SIGHASH flag, to see how powerful Bitcoin transactions are.