diff --git a/src/cli.rs b/src/cli.rs
index d92a834..98c3f98 100644
--- a/src/cli.rs
+++ b/src/cli.rs
@@ -155,7 +155,7 @@ fn derive_secret(
     let (unsalted, cred) =
         perform_challenge(&credentials, salt, timeout - start.elapsed().unwrap(), pin)?;
 
-    Ok((sha256(&[&unsalted[..], salt]), cred.clone()))
+    Ok((sha256(&[salt, &unsalted[..]]), cred.clone()))
 }
 
 fn read_pin() -> Fido2LuksResult<String> {