Given they're implementing the same algorithms(DES, etc) how different can they be? Seems like open-source-paranoia to me, the outdated notion that actively updated open source is wide-open to hackers while slower-updated closed source is invulnerable.