OCB-AES: Ambiguous definition of "Encipher" in RFC document
The 256-bit K of OCS-AES must first go thru FIPS 197's


  KeyExpansion(byte key[4*Nk], word w[Nb*(Nr+1)], Nk)


where it is key[4*Nk] to be transformed into w[Nb*(Nr+1)] (32×4×(14+1) = 1920-bit), which is the last input of


  Cipher(byte in[4*Nb], byte out[4*Nb], word w[Nb*(Nr+1)])