Index: pregenerated/sha256-x86_64-elf.S
--- pregenerated/sha256-x86_64-elf.S.orig
+++ pregenerated/sha256-x86_64-elf.S
@@ -1,6 +1,12 @@
 # This file is generated from a similarly-named Perl script in the BoringSSL
 # source tree. Do not edit by hand.
 
+#if defined(__CET__)
+#include <cet.h>
+#else
+#define _CET_ENDBR
+#endif
+
 #if defined(__has_feature)
 #if __has_feature(memory_sanitizer) && !defined(OPENSSL_NO_ASM)
 #define OPENSSL_NO_ASM
@@ -18,6 +24,7 @@
 .align	16
 GFp_sha256_block_data_order:
 .cfi_startproc	
+	_CET_ENDBR
 	leaq	GFp_ia32cap_P(%rip),%r11
 	movl	0(%r11),%r9d
 	movl	4(%r11),%r10d
@@ -1735,6 +1742,7 @@ GFp_sha256_block_data_order:
 	.byte	0xf3,0xc3
 .cfi_endproc	
 .size	GFp_sha256_block_data_order,.-GFp_sha256_block_data_order
+.section .rodata
 .align	64
 .type	K256,@object
 K256:
@@ -1778,6 +1786,7 @@ K256:
 .long	0xffffffff,0xffffffff,0x03020100,0x0b0a0908
 .long	0xffffffff,0xffffffff,0x03020100,0x0b0a0908
 .byte	83,72,65,50,53,54,32,98,108,111,99,107,32,116,114,97,110,115,102,111,114,109,32,102,111,114,32,120,56,54,95,54,52,44,32,67,82,89,80,84,79,71,65,77,83,32,98,121,32,60,97,112,112,114,111,64,111,112,101,110,115,115,108,46,111,114,103,62,0
+.text
 .type	GFp_sha256_block_data_order_ssse3,@function
 .align	64
 GFp_sha256_block_data_order_ssse3: