Defer AES OCB parameter checking to usage time, not generation.

It would be nice to thoroughly validate that a key is fully functional
and usable as specified during generation, but this introduces a lot
of additional complexity to generation, and will likely never be
complete.

Change-Id: I15938d1e507dc8d373ec9098d6afa5cacbcd141b
3 files changed