Previously we visited the benefits of elliptic curves for cryptography. Lattice based cryptography is starting to become quite popular in academia. The primary benefit of lattice based crypto is the resistance to quantum algorithms. Are there other benefits to lattice based crypto? For example, speed, ciphertext/key sizes, etc?