A financial services firm is future-proofing its VPN infrastructure against harvest-now-decrypt-later attacks. Adversaries are believed to be capturing encrypted tunnel traffic today for decryption once a cryptographically relevant quantum computer becomes available. The security architect must select a NIST-standardized algorithm to protect the confidentiality of the symmetric session keys negotiated during tunnel establishment. Which algorithm should the architect prioritize?