I see, in that case, I guess one way is to let the host mapping the original hash and modified hash, or use two steps for signing, eg host sends the modified hash to client after compression, and client signs it back.