Index: pregenerated/sha512-x86_64-elf.S
--- pregenerated/sha512-x86_64-elf.S.orig
+++ pregenerated/sha512-x86_64-elf.S
@@ -1,6 +1,12 @@
 # This file is generated from a similarly-named Perl script in the BoringSSL
 # source tree. Do not edit by hand.
 
+#if defined(__CET__)
+#include <cet.h>
+#else
+#define _CET_ENDBR
+#endif
+
 #if defined(__has_feature)
 #if __has_feature(memory_sanitizer) && !defined(OPENSSL_NO_ASM)
 #define OPENSSL_NO_ASM
@@ -18,6 +24,7 @@
 .align	16
 GFp_sha512_block_data_order:
 .cfi_startproc	
+	_CET_ENDBR
 	leaq	GFp_ia32cap_P(%rip),%r11
 	movl	0(%r11),%r9d
 	movl	4(%r11),%r10d
@@ -1733,6 +1740,7 @@ GFp_sha512_block_data_order:
 	.byte	0xf3,0xc3
 .cfi_endproc	
 .size	GFp_sha512_block_data_order,.-GFp_sha512_block_data_order
+.section .rodata
 .align	64
 .type	K512,@object
 K512:
@@ -1820,6 +1828,7 @@ K512:
 .quad	0x0001020304050607,0x08090a0b0c0d0e0f
 .quad	0x0001020304050607,0x08090a0b0c0d0e0f
 .byte	83,72,65,53,49,50,32,98,108,111,99,107,32,116,114,97,110,115,102,111,114,109,32,102,111,114,32,120,56,54,95,54,52,44,32,67,82,89,80,84,79,71,65,77,83,32,98,121,32,60,97,112,112,114,111,64,111,112,101,110,115,115,108,46,111,114,103,62,0
+.text
 .type	GFp_sha512_block_data_order_avx,@function
 .align	64
 GFp_sha512_block_data_order_avx: