@AccessesPartialKey
  static RsaSsaPssPublicKey toRsaSsaPssPublicKey(JwtRsaSsaPssPublicKey publicKey)
      throws GeneralSecurityException {
    RsaSsaPssParameters rsaSsaPssParameters =
        RsaSsaPssParameters.builder()
            .setModulusSizeBits(publicKey.getParameters().getModulusSizeBits())
            .setPublicExponent(publicKey.getParameters().getPublicExponent())
            .setSigHashType(hashTypeForAlgorithm(publicKey.getParameters().getAlgorithm()))
            .setMgf1HashType(hashTypeForAlgorithm(publicKey.getParameters().getAlgorithm()))
            .setSaltLengthBytes(saltLengthForPssAlgorithm(publicKey.getParameters().getAlgorithm()))
            .setVariant(RsaSsaPssParameters.Variant.NO_PREFIX)
            .build();
    return RsaSsaPssPublicKey.builder()
        .setParameters(rsaSsaPssParameters)
        .setModulus(publicKey.getModulus())
        .build();
  }
This key manager produces new instances of {@code JwtRsaSsaPss1Verify}. It doesn't support key
generation.
java_src/src/main/java/com/google/crypto/tink/jwt/JwtRsaSsaPssVerifyKeyManager.java