It doesn't have to be different per request, it just has to change frequently often enough, which once per millisecond is more than enough for BREACH.