I'll be honest, I was going off the Wikipedia description of the algorithm. But looking at the RFC you're right that there's only one authentication tag (I als

I'll be honest, I was going off the Wikipedia description of the algorithm. But looking at the RFC you're right that there's only one authentication tag (I also looked at the GPG implementation as well as the proposed OpenPGP RFC for AEAD -- and it looks like they implement chunking on top of OCB/EAX/GCM for this reason). I stand corrected.