H(parent) = SHA256(sender_key[parent] || msg[parent] || H(parent-1))
Note that we defined H(parent) rather than H(message). This is because a hash may only be calculated once the subject is actually received back from the server (i.e. gets a sequence number). This differs from some other concepts of "message ID" that may be calculated locally.
== Timing ==