Index: pregenerated/aesni-gcm-x86_64-elf.S
--- pregenerated/aesni-gcm-x86_64-elf.S.orig
+++ pregenerated/aesni-gcm-x86_64-elf.S
@@ -1,6 +1,12 @@
 # This file is generated from a similarly-named Perl script in the BoringSSL
 # source tree. Do not edit by hand.
 
+#if defined(__CET__)
+#include <cet.h>
+#else
+#define _CET_ENDBR
+#endif
+
 #if defined(__has_feature)
 #if __has_feature(memory_sanitizer) && !defined(OPENSSL_NO_ASM)
 #define OPENSSL_NO_ASM
@@ -346,6 +352,7 @@ _aesni_ctr32_ghash_6x:
 .align	32
 GFp_aesni_gcm_decrypt:
 .cfi_startproc	
+	_CET_ENDBR
 	xorq	%r10,%r10
 
 
@@ -553,6 +560,7 @@ _aesni_ctr32_6x:
 .align	32
 GFp_aesni_gcm_encrypt:
 .cfi_startproc	
+	_CET_ENDBR
 	xorq	%r10,%r10
 
 
@@ -827,6 +835,7 @@ GFp_aesni_gcm_encrypt:
 	.byte	0xf3,0xc3
 .cfi_endproc	
 .size	GFp_aesni_gcm_encrypt,.-GFp_aesni_gcm_encrypt
+.section .rodata
 .align	64
 .Lbswap_mask:
 .byte	15,14,13,12,11,10,9,8,7,6,5,4,3,2,1,0
@@ -839,6 +848,7 @@ GFp_aesni_gcm_encrypt:
 .Lone_lsb:
 .byte	1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
 .byte	65,69,83,45,78,73,32,71,67,77,32,109,111,100,117,108,101,32,102,111,114,32,120,56,54,95,54,52,44,32,67,82,89,80,84,79,71,65,77,83,32,98,121,32,60,97,112,112,114,111,64,111,112,101,110,115,115,108,46,111,114,103,62,0
+.text
 .align	64
 #endif
 .section	.note.GNU-stack,"",@progbits