Downloading from nasm.us frequently fails. Avoid depending on it. Change the expected location of nasm in build.rs.
Match BoringSSL. According to the Chromium discussion about nasm, it is also substantially faster.