Are you sure that this random bit flipping attack is real? It seems like it would be very easy to protect against. Simply having a hash of the metadata table in the same encrypted memory would prevent bitflipping inside the table from having any effect other than to corrupt the table in a detectable way.

-- Marc Juul