@forest if you're on an edit spree, I would recommend a change to this answer
specifically, the sentence:
> Lattice-based cryptography itself is fairly well understood, exploiting the shortest vector problem as a hardness assumption to construct a trapdoor function.
I'm pretty sure not all lattice cryptosystems are based on SVP, and certainly not all of them use trapdoor functions
@forest "Most" lattice crypto is based on LWE which is hard under GapSVP assumption. There are a whole bunch of other assumptions though. Some more standard than others.