Розробка системи адаптивного постквантового захисту на базі гібридної схеми AES+ML-KEM із механізмами апаратної прив’язки та активної дезінформації

Abstract

The paper presents a local file protection system focused on post-quantum readiness, hardware binding of key storage, and stealth behavior in an unauthorized environment. The AES-256-GCM + ML-KEM-1024 hybrid cryptographic scheme combines fast authenticated file encryption with a post-quantum key encapsulation mechanism. To reduce the risk of using copied keys on another device, HWID binding is applied to the my_keys.pqc local key storage. If the hardware context does not match the authorized device, the system switches to Intruder Mode and generates honey output instead of a direct access denial.