diff --git a/src/_zkapauthorizer/controller.py b/src/_zkapauthorizer/controller.py
index c2a890ca8c68a630d267cec01113423a1c448c80..2cc84307fa28666abfd65b5ccb62e2832ca6b3f5 100644
--- a/src/_zkapauthorizer/controller.py
+++ b/src/_zkapauthorizer/controller.py
@@ -253,22 +253,20 @@ class RistrettoRedeemer(object):
             for token
             in unblinded_tokens
         )
-        clients_preimages = list(
-            token.preimage()
-            for token
-            in unblinded_tokens
-        )
         clients_verification_keys = list(
             token.derive_verification_key_sha512()
             for token
             in unblinded_tokens
         )
-        clients_passes = zip(
-            clients_preimages, (
-                verification_key.sign_sha512(message)
-                for verification_key
-                in clients_verification_keys
-            ),
+        clients_signatures = list(
+            verification_key.sign_sha512(message)
+            for verification_key
+            in clients_verification_keys
+        )
+        clients_preimages = list(
+            token.preimage()
+            for token
+            in unblinded_tokens
         )
         marshaled_passes = list(
             (