IIUC the rotating challenge actually didn't have anything to do with the key, it was a red herring. The actual decryption key was just a function of the fixed serial number or something like that.