If a person with Wireshark can figure out what you are doing, so can a nation-scale signature detection system.

Things like custom protocol handshakes will give the underlying application away. It doesn't matter if the traffic itself is encrypted.