KeyToJWKS creates a jwk.Set from the passed publicKey and sets the algorithm key in the jwk.Key to the passed jwa.SignatureAlgorithm.

SignEntityStatement creates a signed JWT of the 'entity-statement+jwt' type for the passed payload using the passed crypto.Signer with the passed jwa.SignatureAlgorithm.

SignPayload signs a payload with the passed properties and adds the kid to the jwt header.

VerifyWithSet uses a jwk.Set to verify a *jws.Message, returning the decoded payload or an error.