[tgummerer]

You don't really have to roll your own crypto to create such an app. There's always openssl and the signal protocol, which you'd only need to implement without designing anything.

Sure that can go wrong as anything can, but it's far from rolling your own crypto and makes things a lot easier.