...
The plan is to have 3 interfaces in three sub-directories under pkg/plugins, one for JWEBuilder to Serializeserialize/Unserialize deserialize a JWE, another for Crypto and the other for KMS. Crypto and KMS interfaces will serve as wrapper to Tink operations like Encrypt(), Decrypt(), Sign(), Verify(), etc. While JWEBuilder will use the other two to build a JWE envelope by offering a Seal (serialize) and Open (unserialize) functions.
...