An IS auditor is reviewing an organization's plan to encrypt a large volume of data transferred nightly between two internal data centers over a dedicated link. The security team must choose an encryption approach that provides strong confidentiality while minimizing performance overhead on the high-volume transfers. Which approach should the auditor expect to see recommended for the bulk data transfer itself?