noqtis-commit(1)

NAME

noqtis-commit — commit to a file now, to reveal it later

SYNOPSIS

noqtis commit

[--kind randomisation | preregistration | other] [--label text] [--after time] [-o | --out salt] [-f | --force] dir file

DESCRIPTION

noqtis commit records in the data record of dir (noqtis-data(5)) a commitment to file, such as a randomisation list made before a trial or an analysis plan written before the data are seen: the 64 hex digits of

SHA3-256("noqtis-commit-1" || 0x00 || 32 as 8 bytes big-endian ||
         salt || the bytes of file)

with a fresh 32-byte salt from the operating system's random source, written to file.salt (owner-only; or -o; -f replaces one). Without the salt the digest says nothing of the file; with it anyone can check that a file is the one committed to (noqtis-reveal(1)). Keep the file and its salt out of the capsule until the reveal, and seal the capsule with a timestamp (noqtis-seal(1) --tsa) so the commitment has a date no one can move.

--kind

what the file is (default other)

--label

a short name for it

--after

a UTC time ‘YYYY-MM-DDTHH:MM:SSZ’ before which it is not to be revealed

EXIT STATUS

0 when the commitment and the salt are written, 2 on a usage or file error (an existing salt file without -f among them).

SEE ALSO

noqtis-reveal(1), noqtis-seal(1), nqdcommit(3), noqtis-data(5)