@wolf480pl Well I kind of count file formats and protocols with multiple crypto-algorithms as rolling your own algorithms, not just implementations.

Like what's the difference between TLS (specially ClientHello+ServerHello) and the various kinds of Diffie-Hellman in terms of security?

But if someone implements TLS and makes sure that their implementations passes the tests… Short of doing an actual audit (which seems to be barely ever done, almost nobody reads code), it's probably as good at any other TLS implementation.