ocb_finish
return ocb_finish(ctx, (unsigned char *)tag, len, 0);
return ocb_finish(ctx, tag, len, 1);