Simply: performing a timing attack against a hash function implies performing a second-preimage attack against the hash function.