Before being decrypted, the encrypted header's CTR additionally encodes metadata used to validate package2's contents as follows: | Before being decrypted, the encrypted header's CTR additionally encodes metadata used to validate package2's contents as follows: |