Learning Lattice Cryptography
Companion to Vadim Lyubashevsky, Basic Lattice Cryptography: The concepts behind Kyber (ML-KEM) and Dilithium (ML-DSA) (2024; version last updated June 18, 2025).
LWE encryption, the geometry of lattices and SIS, polynomial rings, the NTT, Kyber and the Fujisaki–Okamoto transform, then Σ-protocols, rejection sampling and Dilithium. Every step the paper skips is spelled out, with toy examples.