Quantum computing progress
is now fast enough that the security community cannot afford to wait.
Public-key schemes face complete failure under Shor's factoring algorithm,
while symmetric ciphers take a more moderate hit from Grover's search speedup,
which cuts effective key length in half. Upgrading to 256-bit symmetric keys
helps, but it does not address the Harvest-Now-Decrypt-Later (HNDL) threat,
where adversaries collect encrypted data today and decrypt it retroactively
once a quantum machine is available. This paper introduces
AQIS (Adaptive
Quantum-Immune Symmetric Encryption), a new three-layer cryptographic
framework. The data layer uses AES-256-GCM or AEGIS-256. The key layer uses
CRYSTALS-Kyber (FIPS 203) to deliver session keys in a quantum-safe manner. The
protocol layer introduces a novel Automated Key Rotation Protocol (AKRP) that
refreshes session keys after a defined block count using HKDF-SHA512, closing
the long-running key exposure window. AQIS-Full achieves 192-bit post-quantum
security and 9.8+ Gbps throughput. AQIS-Lite is optimized for ARM Cortex-M4 IoT
hardware. The framework is fully aligned with NIST FIPS 203, 204 and 205, and
includes a four-phase organizational migration roadmap.
Please enter the email address corresponding to this article submission to download your certificate.

