private static RsaSsaPssParameters.HashType hashTypeForAlgorithm(
      JwtRsaSsaPssParameters.Algorithm algorithm) throws GeneralSecurityException {
    if (algorithm.equals(JwtRsaSsaPssParameters.Algorithm.PS256)) {
      return RsaSsaPssParameters.HashType.SHA256;
    }
    if (algorithm.equals(JwtRsaSsaPssParameters.Algorithm.PS384)) {
      return RsaSsaPssParameters.HashType.SHA384;
    }
    if (algorithm.equals(JwtRsaSsaPssParameters.Algorithm.PS512)) {
      return RsaSsaPssParameters.HashType.SHA512;
    }
    throw new GeneralSecurityException("unknown algorithm " + algorithm);
  }
This key manager produces new instances of {@code JwtRsaSsaPss1Verify}. It doesn't support key
generation.
java_src/src/main/java/com/google/crypto/tink/jwt/JwtRsaSsaPssVerifyKeyManager.java