Discussion on answer by MechMK1: Why is it wrong to *implement* myself a known, published, widely believed to be secure crypto algorithm?

Imported from a comment discussion on https://security.stackexchange.com/questions/209652/why-is-it-wrong-to-implement-myself-a-known-published-widely-believed-to-be/209657#209657