Lattice-based cryptography is the mathematics behind ML-KEM and ML-DSA, the post-quantum standards NIST published in 2024. This guide works up from what a lattice is, through the Shortest and Closest Vector Problems, Learning With Errors and its ring and module variants, to the protocols themselves and an honest account of why lattices are believed to resist quantum attack.
