OCB blockcipher mode - is it allowed?