Why is lattice-based cryptography believed to be hard against quantum computer? Why is lattice-based cryptography believed to be hard against quantum computer?

Learning With Errors(LWE) problem (reduction to SVP) is just one example.

Can you provide some intuition of the hardness?
Why is lattice-based cryptography believed to be hard against quantum computer?


Because no one has developed a quantum algorithm (yet) that breaks these crypto primitives.

Wish we could do better than that, but that is the best we have at the moment. We believe these primitives to be quantum resistant because no one has given evidence otherwise.