Update README.md: re-arrange secret and password scenarios

Author: jann0k

README.md

@@ -103,6 +103,24 @@ sender public key).
     capsule that contains encrypted KEK
 11. *Follow steps from RSA-OAEP scenario steps 12-15*
 
+### CDOC2 with symmetric key from secret
+
+Similar to ECDH scenario, but KEK is derived from symmetric key (secret) identified by key_label using HKDF algorithm.
+
+1. Sender and recipient have a pre shared secret identified by key_label 
+2. Sender derives key encryption key (KEK) from symmetric key, key_label and salt (generated 
+   using secure random) using HKDF algorithm
+3. *Follow steps from ECDH scenario 4-6*
+4. Sender adds encrypted FMK with key_label to CDoc header
+5. *Follow steps from ECDH scenario 8-10*
+6. Recipient searches CDoc header for key_label and finds salt and encrypted FMK
+7. Recipient derives encryption key (KEK) from salt, key_label and pre-shared symmetric key (secret)
+8. Recipient decrypts FMK using KEK.
+9. *Follow steps from ECDH scenario 13-15*
+
+cdoc2-java-ref-impl does not provide solution for securely storing the secret, but most password managers
+ can do that.
+
 ### CDOC2 with symmetric key from password
 
 Similar to Symmetric Key scenario, but symmetric key is derived from password and salt using PBKDF2 algorithm.
@@ -121,23 +139,6 @@ Similar to Symmetric Key scenario, but symmetric key is derived from password an
 cdoc2-java-ref-impl does not provide solution for securely storing the password, but most password managers
 can do that.
 
-### CDOC2 with symmetric key from secret
-
-Similar to ECDH scenario, but KEK is derived from symmetric key (secret) identified by key_label using HKDF algorithm.
-
-1. Sender and recipient have a pre shared secret identified by key_label 
-2. Sender derives key encryption key (KEK) from symmetric key, key_label and salt (generated 
-   using secure random) using HKDF algorithm
-3. *Follow steps from ECDH scenario 4-6*
-4. Sender adds encrypted FMK with key_label to CDoc header
-5. *Follow steps from ECDH scenario 8-10*
-6. Recipient searches CDoc header for key_label and finds salt and encrypted FMK
-7. Recipient derives encryption key (KEK) from salt, key_label and pre-shared symmetric key (secret)
-8. Recipient decrypts FMK using KEK.
-9. *Follow steps from ECDH scenario 13-15*
-
-cdoc2-java-ref-impl does not provide solution for securely storing the secret, but most password managers
- can do that.
 
 
 ## Structure