> salting

Do you mean IVs? Can't you (for most algorithms) just use a monotonic counter when streaming blocks?

> optional hmac authentication

Wouldn't that just be done per-chunk instead of per-file?