thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Lattice-Based Cryptography

Cryptography based on hard problems over mathematical lattices, such as learning with errors, believed quantum-resistant.

Definition

Lattice problems like Module-LWE and NTRU have no known efficient quantum algorithms. Lattice schemes offer good performance and moderate key sizes, which is why ML-KEM, ML-DSA, and FN-DSA are all lattice-based. Lattices also underpin fully homomorphic encryption.

Example

ML-KEM security relies on the difficulty of the Module Learning With Errors problem.

Exam tip

Most NIST PQC standards are lattice-based; SLH-DSA (hash) and HQC (code) provide diversity.

Related terms