(Learning with errOrs based encryption with chosen ciphertexT secUrity for poSt quantum era) What's LOTUS? LOTUS is a lattice-based cryptosystem developed by NICT. LOTUS consists of LOTUS-PKE for public key encryption and LOTUS-KEM for key encapsulation. LOTUS aims at providing post-quantum security, meaning it may remain secure against large-scale quantum computers. Some highlighted properties of