How exactly am I supposed to decrypt CiphertextForRecipient?

I found this answer for a similar problem: How to decrypt the CiphertextForRecipient using the private key in the enclave?

But I really don't know how to do the same thing in Go.

I'm building a route for my go (gin) server that generates a Data Encryption Key (DEK), following the principle of zero-trust (the backend never sees the plaintext.

I'm building a route for my go (gin) server that generates a Data Encryption Key (DEK), following the principle of zero-trust (the backend never sees the plaintext).