Not sure I understand the problem this is trying to solve. I can hash a 2Gb file with an empty hash placeholder, sign the hash and store it in the file. Then on decryption, zero out the placeholder, hash the whole file, and compare the result to the included signed hash placeholder without storing 2Gb in memory.