If you're just handing out the random string without signing it (or performing some other constant-time comparison when validating), you're vulnerable to timing

If you're just handing out the random string without signing it (or performing some other constant-time comparison when validating), you're vulnerable to timing attacks