@kelalaka You can try asking on meta, but looking at all of the existing tags, I have to say that it doesn't seem like a good fit.

@forest if you're on an edit spree, I would recommend a change to this answer

specifically, the sentence:

> Lattice-based cryptography itself is fairly well understood, exploiting the shortest vector problem as a hardness assumption to construct a trapdoor function.

I'm pretty sure not all lattice cryptosystems are based on SVP, and certainly not all of them use trapdoor functions

Ah thanks. I added that edit in response to a comment. I'll change it.

I thought most lattice cryptosystems used SVP or CVP though?

@forest "Most" lattice crypto is based on LWE which is hard under GapSVP assumption. There are a whole bunch of other assumptions though. Some more standard than others.