That's the tricky part. It could be anything that's ever been published...that's why this code type is informally known as "security by obscurity."