Why getting encryption done right is so hard?

Why encryption is so hard? Why isn't there well defined guidelines to get it done the right way. Some guide even mislead people who ask for it. eg: Hardening SSH keygen algo, OpenSSL certificate generation, using gpg sensibly