Suppose you used the timing attack to recover the hash of a token, now you need to compute a preimage of the hash.