Fix ML-KEM encapsulation ordering

2026-05-05 10:40:06 +02:00
parent 98396a7c7e
commit 9096efd36a
2 changed files with 18 additions and 1 deletions
@@ -212,7 +212,7 @@ def pq_kex_client_encapsulate(public_key_hex: str) -> tuple[str, bytes]:
    """Encapsulate to a server ML-KEM public key. Returns (ciphertext_hex, secret)."""
    from cryptography.hazmat.primitives.asymmetric import mlkem
    pub = mlkem.MLKEM768PublicKey.from_public_bytes(bytes.fromhex(public_key_hex))
-    ciphertext, shared_secret = pub.encapsulate()
+    shared_secret, ciphertext = pub.encapsulate()
    return ciphertext.hex(), shared_secret