go/cm/cmd/cmenctool/multirecipient.t |  6 +++---
 go/cm/cmd/cmenctool/no-from.t        |  6 +++---
 go/cm/cmd/cmenctool/no-id.t          |  2 +-
 go/cm/cmd/cmenctool/no-to.t          |  2 +-
 go/cm/cmd/cmenctool/prv-encrypted.t  |  2 +-
 go/cm/cmd/cmenctool/pub.t            |  4 ++--
 go/cm/cmd/cmenctool/sender-auth.t    | 10 +++++-----
 spec/Integrity                       |  2 +-

diff --git a/go/cm/cmd/cmenctool/multirecipient.t b/go/cm/cmd/cmenctool/multirecipient.t
index fd17432212024dfee30fd8af44c341477d6fcc16e08c4a7cb5052f1088bb2cc4..f0a961ff51848a797e824fbd57118b90850c5fe75a7abaa7b866dc1a62324c09 100755
--- a/go/cm/cmd/cmenctool/multirecipient.t
+++ b/go/cm/cmd/cmenctool/multirecipient.t
@@ -13,15 +13,15 @@
 test_expect_success "encrypting" "
     cmenctool enc.0.pub enc.1.pub <enc.data >enc.enc"
 
-pubId=$(kekspp -v -p /data/id <enc.0.pub)
+pubId=$(kekspp -v -p /id <enc.0.pub)
 ln -s enc.0.prv $pubId
 test_expect_success "0: decrypting" "
     cmenctool -d -prvs . <enc.enc >enc.data.got"
 test_expect_success "0: comparing" "test_cmp enc.data enc.data.got"
 rm $pubId
 
-pubId=$(kekspp -v -p /data/id <enc.1.pub)
-ln -s enc.1.prv $(kekspp -v -p /data/id <enc.1.pub)
+pubId=$(kekspp -v -p /id <enc.1.pub)
+ln -s enc.1.prv $(kekspp -v -p /id <enc.1.pub)
 test_expect_success "1: decrypting" "
     cmenctool -d -prvs . <enc.enc >enc.data.got"
 test_expect_success "1: comparing" "test_cmp enc.data enc.data.got"
diff --git a/go/cm/cmd/cmenctool/no-from.t b/go/cm/cmd/cmenctool/no-from.t
index 2d3f4fa2fd8ac2f6f80127de03eeb54a1598f48b88debcc1fb79cb270d3e57e2..a1d6a20152729e9ddfcd59613caca3bc80fd09bbe9b369d35db993efcfae4658 100755
--- a/go/cm/cmd/cmenctool/no-from.t
+++ b/go/cm/cmd/cmenctool/no-from.t
@@ -12,11 +12,11 @@ test_expect_success "$algo: sender pub generation" "cmkeytool \
     -algo $algo -ku kem -sub N=S 5>s.pub 9>s.prv"
 test_expect_success "$algo: recipient pub generation" "cmkeytool \
     -algo $algo -ku kem -sub N=R 5>r.pub 9>r.prv"
-senderId=$(kekspp -v -p /data/id <s.pub)
+senderId=$(kekspp -v -p /id <s.pub)
 ln -fs ../s.prv prvs/$senderId
-ln -fs ../r.prv prvs/$(kekspp -v -p /data/id <r.pub)
+ln -fs ../r.prv prvs/$(kekspp -v -p /id <r.pub)
 ln -fs ../s.pub pubs/$senderId
-ln -fs ../r.pub pubs/$(kekspp -v -p /data/id <r.pub)
+ln -fs ../r.pub pubs/$(kekspp -v -p /id <r.pub)
 test_expect_success "$algo: encrypting" "cmenctool \
     -from s.pub -prvs prvs -no-from r.pub <enc.data >enc.enc"
 test_expect_success "$algo: decrypting fails" "
diff --git a/go/cm/cmd/cmenctool/no-id.t b/go/cm/cmd/cmenctool/no-id.t
index 14aedcb0a356a851ad0bf43ee33e3346b3e8231781a4761774376d9f11fe1184..fbd8b5c0710867806390fc12b8a8e6f25c1af4cc547534099ddc1165b586bee2 100755
--- a/go/cm/cmd/cmenctool/no-id.t
+++ b/go/cm/cmd/cmenctool/no-id.t
@@ -10,7 +10,7 @@
 test_expect_success "$algo: pub generation" "cmkeytool \
     -algo $algo -ku kem -sub N=0 5>enc.pub 9>enc.prv"
 test_expect_success "$algo: encrypting" "cmenctool -no-id enc.pub <enc.data >enc.enc"
-pubId=$(kekspp -v -p /data/id <enc.pub)
+pubId=$(kekspp -v -p /id <enc.pub)
 ln -s enc.prv $pubId
 test_expect_success "$algo: decrypting" "
     cmenctool -d -prvs . <enc.enc >enc.data.got"
diff --git a/go/cm/cmd/cmenctool/no-to.t b/go/cm/cmd/cmenctool/no-to.t
index cc33dc74a2eae084ef628dcd247e39a551b112ff4afe6fdf2c1cb8f682c8c699..4cf4c57941c1e19a12280a795ea5b95cfbb2f9c00d081fa1ddc40e80f21eef00 100755
--- a/go/cm/cmd/cmenctool/no-to.t
+++ b/go/cm/cmd/cmenctool/no-to.t
@@ -10,7 +10,7 @@
 test_expect_success "$algo: pub generation" "cmkeytool \
     -algo $algo -ku kem -sub N=0 5>enc.pub 9>enc.prv"
 test_expect_success "$algo: encrypting" "cmenctool -no-to enc.pub <enc.data >enc.enc"
-pubId=$(kekspp -v -p /data/id <enc.pub)
+pubId=$(kekspp -v -p /id <enc.pub)
 ln -s enc.prv $pubId
 test_expect_success "$algo: decrypting fails" "
     ! cmenctool -d -prvs . <enc.enc >enc.data.got"
diff --git a/go/cm/cmd/cmenctool/prv-encrypted.t b/go/cm/cmd/cmenctool/prv-encrypted.t
index 39ab49bac116dc627c80a9ea181822fdaa277fb69215fab48bacb9d9bfd7edfa..b928bf955c589dbab71532e7025f8e7b89b98e898fbb534fccd877539a7e3e0e 100755
--- a/go/cm/cmd/cmenctool/prv-encrypted.t
+++ b/go/cm/cmd/cmenctool/prv-encrypted.t
@@ -15,7 +15,7 @@ test_expect_success "$algo: key encrypting" "
     cmenctool -p -embed $balloonparams <enc.prv >enc.prv.enc"
 test_expect_success "$algo: data encrypting" "
     cmenctool enc.pub <enc.data >enc.enc"
-ln -s enc.prv.enc $(kekspp -v -p /data/id <enc.pub)
+ln -s enc.prv.enc $(kekspp -v -p /id <enc.pub)
 test_expect_success "$algo: decrypting" "
     cmenctool -d -prvs . <enc.enc >enc.data.got"
 test_expect_success "$algo: comparing" "test_cmp enc.data enc.data.got"
diff --git a/go/cm/cmd/cmenctool/pub.t b/go/cm/cmd/cmenctool/pub.t
index df47c34a3cacd846a9747a4064572edf572f2fe6e9161baa7e08634236514bd0..6d99ab46c507f571d7d76eaa930b8835541954421731e7a22ec830955487ff8e 100755
--- a/go/cm/cmd/cmenctool/pub.t
+++ b/go/cm/cmd/cmenctool/pub.t
@@ -10,12 +10,12 @@ algo=mceliece6960119-x25519
 algo0=$algo
 test_expect_success "$algo: pub generation" "
     cmkeytool -algo $algo -ku kem -sub A=$algo 5>enc.$algo.pub 9>enc.$algo.prv"
-id0=$(kekspp -v -p /data/id <enc.$algo.pub)
+id0=$(kekspp -v -p /id <enc.$algo.pub)
 algo=sntrup761-x25519
 algo1=$algo
 test_expect_success "$algo: pub generation" "
     cmkeytool -algo $algo -ku kem -sub A=$algo 5>enc.$algo.pub 9>enc.$algo.prv"
-id1=$(kekspp -v -p /data/id <enc.$algo.pub)
+id1=$(kekspp -v -p /id <enc.$algo.pub)
 
 test_expect_success "encrypting" "
     cmenctool enc.$algo0.pub enc.$algo1.pub <enc.data >enc.enc"
diff --git a/go/cm/cmd/cmenctool/sender-auth.t b/go/cm/cmd/cmenctool/sender-auth.t
index 694f882664a9117fcc721ee1b0f4909314b3b0235ec85a41c881c8c0f7fa8f62..92970f45b39443dff1d2d8b012b5026bff8fd610f8d85679305a7ca34c87d30b 100755
--- a/go/cm/cmd/cmenctool/sender-auth.t
+++ b/go/cm/cmd/cmenctool/sender-auth.t
@@ -12,17 +12,17 @@ test_expect_success "$algo: sender pub generation" "cmkeytool \
     -algo $algo -ku kem -sub N=S 5>s.pub 9>s.prv"
 test_expect_success "$algo: recipient pub generation" "cmkeytool \
     -algo $algo -ku kem -sub N=R 5>r.pub 9>r.prv"
-ln -fs ../s.prv prvs/$(kekspp -v -p /data/id <s.pub)
-ln -fs ../r.prv prvs/$(kekspp -v -p /data/id <r.pub)
-ln -fs ../s.pub pubs/$(kekspp -v -p /data/id <s.pub)
-ln -fs ../r.pub pubs/$(kekspp -v -p /data/id <r.pub)
+ln -fs ../s.prv prvs/$(kekspp -v -p /id <s.pub)
+ln -fs ../r.prv prvs/$(kekspp -v -p /id <r.pub)
+ln -fs ../s.pub pubs/$(kekspp -v -p /id <s.pub)
+ln -fs ../r.pub pubs/$(kekspp -v -p /id <r.pub)
 test_expect_success "$algo: encrypting" "cmenctool \
     -from s.pub -prvs prvs r.pub <enc.data >enc.enc"
 export CM_PRVS=$(realpath prvs) CM_PUBS=$(realpath pubs)
 test_expect_success "$algo: decrypting" "
     cmenctool -d <enc.enc >enc.data.got"
 test_expect_success "$algo: comparing" "test_cmp enc.data enc.data.got"
-ln -fs ../r.pub pubs/$(kekspp -v -p /data/id <s.pub)
+ln -fs ../r.pub pubs/$(kekspp -v -p /id <s.pub)
 test_expect_success "$algo: bad auth" "
     ! cmenctool -d <enc.enc >enc.data.got"
 
diff --git a/spec/Integrity b/spec/Integrity
index 1b02a66474e1f9f09c9681314132fc593576ba9d10c4586de911d8e826d9adca..c168f4c75a364e1a65adf1bc93482e6b2f51df4af5eb3e63f9a0f7d30651f954 100644
--- a/spec/Integrity
+++ b/spec/Integrity
@@ -12,6 +12,6 @@ [cm/sign/] .sig file can be verified with:
 => PUBKEY-CM.pub
 => PUBKEY-CM.pub.asc
 
-    $ ln -s PUBKEY-CM.pub $(kekspp -v -p /data/id <PUBKEY-CM.pub)
+    $ ln -s PUBKEY-CM.pub $(kekspp -v -p /id <PUBKEY-CM.pub)
     $ cat keks-$version.tar.zst.sig keks-$version.tar.zst |
         cmsigtool -v -d -pubs .