salt in Password Based MAC

["Kwon, YongChul" <godslord@xxxxxxxxxxx>]

How should I make the first input value of first iteration of PBM?

salt||sharedsecret or sharedsecret||salt? ('||' means concatenation)

I think RFC-2510 said message||salt, but I can't sure. :-(

I attach part of RFC-2510 which refers how to make initial input.

-----

3.1.3 PKI Message Protection

...

In the above protectionAlg the salt value is appended to the shared
secret input. The OWF is then applied iterationCount time, where
the salted secret is the input to the first iteration and

...