Is there a significantly advantage to these data structures, or is it simply the status-quo and the easiest to use for describing constructions?
- Anybody can ask a question
- Anybody can answer
- The best answers are voted up and rise to the top
Lattices are used simply because we do not know how to build homomorphic encryption from any other problems, like factoring or discrete logarithm. Their mathematical structure was found to simultaneously enable homomorphic addition and multiplication while other bases for encryption could handle at most one of them. (For the case of ideal lattices/rings, this seems intuitive: If ciphertexts are elements of a ring then you can naturally add and multiply them, although things are not really that simple. It was later found that the ring structure could be removed, and that any lattice would suffice.)
Advantages like quantum resistance etc are only incidental.
For the second part of question: Intractability of existing lattice based problems have the following advantages over the existing in number theory as the big prime factorization and the discrete logarithm problem:
but there are still far away to resemble a practical cryptographic efficient scheme compared with the existing ones.