I think the public key encryption scheme is enough good for a game code list.
- You can simply create a cheat for the game to get a key - You can log the webrequest and reverse the games functions to calculate the key - You can do all of this as often as you like and steal all keys because there is no HWID check