"Lord Feistel": Why Rolling Your Own Crypto Is a Bad Idea