The ciphers offered for unicast traffic, four octets each.
Reading a capture
In a beacon this is what the AP will accept; in an association request it is the single one the station picked. Same element, two different meanings depending on which frame carries it.