Suppose Bob designs a cipher himself, and uses it to encrypt his private files. He keeps the cipher's design secret.

Eventually, an attacker gets hold of the cipher's design, finds that it's easily breakable with cryptanalysis, and is able to decrypt Bob's private files without the key.

What mistake did Bob make?