# What is the difference between Module-LWE and Ring-LWE?

Recently, the CRYSTALS lattice-based cryptographic suite has been published, which is based on "module lattices". What is Module-LWE? How is it different from Ring-LWE?

[AD17]: Albrecht and Deo, Large Modulus Ring-LWE $\geq$ Module-LWE.