5 ms·

yes precisely, you must include a random value that remains secret until the appropriate reveal time.