I am a decent C programmer, but I have next to zero knowledge in cryptography.
Now, if I was to implement "naïvely" some well-established crypto-related standard protocol like https://www.ietf.org/rfc/rfc2898.txt or https://www.rfc-editor.org/rfc/rfc7296.txt , what do you think would be the risks for the resulting system? What vulnerabilities would I be likely to introduce (beyond basic programming bugs such as buffer overflow or stack smashing)?