Typo: swap es and e1 tokens in KKhfs example

[jon-signal]

I think the KKhfs example has a typo. It currently shows KKhfs as:

KKhfs:
	-> s
	<- s
	...
	-> e, e1, es, ss
	<- e, ee, ekem1, se

…but I think the e1 and es tokens should swap positions because the section about the hfs modifier explains:

The "hfs" pattern modifier adds an "e1" token directly following the first occurrence of "e", unless there is a DH operation in this same message, in which case the "hfs" [sic: #2] token is placed directly after this DH (so that the public key will be encrypted).

[trevp]

Hi Jon I think you're right, I'll get to it in a few days.

[jon-signal]

Thanks kindly!