Even if the original key--and you can think of that in the case of Colossus as the configuration of the machine that comes from some code book that could be perfectly randomly generated and shared between endpoints. 