Making of SARE: How I Designed a File Format for Encrypted Data From Scratch (zola.ink)

For the header you need to add a sort of MAC system to authenticate the metadata and the header