NTRU is lattice-based and not known to be breakable even with quantum computers. Commonly used cryptosystems like RSA or ECC, on the other hand, will be broken if and when quantum computers become available.
In addition, NTRU is significantly faster than other public-key cryptosystems.
The following chart shows results for an Intel E2160 processor running at 1.8 GHz. The data was generated with the benchmark program that is included in the NTRU library.
Mouse over to switch between 32 and 64 bits:
For an in-depth description and cryptographic analysis please refer to the "Resources" section to the right.