mlsanityData to 7 Oct 2026

Perfectly Secure Steganography Using Minimum Entropy Coupling

arXiv 2210.14889 ↗First posted 24 Oct 2022cs.CR cs.AI cs.MMcited by 42

Not on the map. Why?

Abstract (arXiv)

Steganography is the practice of encoding secret information into innocuous content in such a manner that an adversarial third party would not realize that there is hidden meaning. While this problem has classically been studied in security literature, recent advances in generative models have led to a shared interest among security and machine learning researchers in developing scalable steganography techniques. In this work, we show that a steganography procedure is perfectly secure under Cachin (1998)'s information-theoretic model of steganography if and only if it is induced by a coupling. Furthermore, we show that, among perfectly secure procedures, a procedure maximizes information throughput if and only if it is induced by a minimum entropy coupling. These insights yield what are, to the best of our knowledge, the first steganography algorithms to achieve perfect security guarantees for arbitrary covertext distributions. To provide empirical validation, we compare a minimum entropy coupling-based approach to three modern baselines -- arithmetic coding, Meteor, and adaptive dynamic grouping -- using GPT-2, WaveRNN, and Image Transformer as communication channels. We find that the minimum entropy coupling-based approach achieves superior encoding efficiency, despite its stronger security constraints. In aggregate, these results suggest that it may be natural to view information-theoretic steganography through the lens of minimum entropy coupling.

Key facts. Cited by 42 papers in the map (data through 7 Oct 2026). Builds on 12 of its 29 references that are in the map. First posted on arXiv 24 Oct 2022.

Builds on

12 of 29 references.

References · 12

  1. 2016Pointer Sentinel Mixture Modelscited by 2,992
  2. 2019The Curious Case of Neural Text Degenerationcited by 2,881
  3. 2017Natural TTS Synthesis by Conditioning WaveNet on Mel Spectrogram Predictionscited by 800
  4. 2018Image Transformercited by 770
  5. 2018Efficient Neural Audio Synthesiscited by 218
  6. 2021TorchAudio: Building Blocks for Audio and Speech Processingcited by 83
  7. 2019Neural Linguistic Steganographycited by 73
  8. 2021Provably Secure Generative Linguistic Steganographycited by 34
  9. 2019Towards Near-imperceptible Steganographic Textcited by 30
  10. 2016Entropic Causal Inferencecited by 27
  11. 2021Communicating via Markov Decision Processescited by 9
  12. 2019Minimum--Entropy Couplings and their Applicationscited by 7

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 2; 2024: 12; 2025: 10; 2026: 18.

42 papers.

Sort:

By area:

  1. 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
  2. 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
  3. 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 52
  4. 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Modelscited by 51
  5. 2024Pseudorandom Error-Correcting Codescited by 40
  6. 2024Prompting a Pretrained Transformer Can Be a Universal Approximatorcited by 25
  7. 2024Excuse me, sir? Your language model is leaking (information)cited by 11
  8. 2024Watermarking Language Models with Error Correcting Codescited by 10
  9. 2025The Steganographic Potentials of Language Modelscited by 10
  10. 2024Towards Measuring Goal-Directedness in AI Systemscited by 7
  11. 2025TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agentcited by 7
  12. 2025All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Languagecited by 7
30 more
  1. 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoringcited by 6
  2. 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretabilitycited by 6
  3. 2023Exploring the Relevance of Data Privacy-Enhancing Technologies for AI Governance Use Casescited by 5
  4. 2024Provably Secure Disambiguating Neural Linguistic Steganographycited by 5
  5. 2024OD-Stega: LLM-Based Relatively Secure Steganography via Optimized Distributionscited by 5
  6. 2024Minimum Entropy Coupling with Bottleneckcited by 5
  7. 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systemscited by 5
  8. 2025Scheming Ability in LLM-to-LLM Strategic Interactionscited by 4
  9. 2026Voluntary Collusion with Secret Tools in Competing LLM Agentscited by 4
  10. 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuitscited by 3
  11. 2025PSyDUCK: Training-Free Steganography for Latent Diffusioncited by 3
  12. 2026Efficient Provably Secure Linguistic Steganography via Range Codingcited by 3
  13. 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Modelscited by 2
  14. 2025Learning to Match Unpaired Data with Minimum Entropy Couplingcited by 2
  15. 2025Provable Secure Steganography Based on Adaptive Dynamic Samplingcited by 2
  16. 2025Consensus Sampling for Safer Generative AIcited by 2
  17. 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganographycited by 2
  18. 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egresscited by 2
  19. 2025A High-Capacity and Secure Disambiguation Algorithm for Neural Linguistic Steganographycited by 1
  20. 2026Steganography Without Modification: Hidden Communication via LLM Seedscited by 1
  21. 2026A Note on the Strategic Confinement Problemcited by 1
  22. 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systemscited by 1
  23. 2026NEST: Nascent Encoded Steganographic Thoughtscited by 0
  24. 2026Text Steganography with Dynamic Codebook and Multimodal Large Language Modelcited by 0
  25. 2026Breaking the Finite-Sample Barrier in Entropy Couplingcited by 0
  26. 2026Cordyceps: Covert Control Attacks on LLMs via Data Poisoningcited by 0
  27. 2026REED: Post-Training Representation Editing for Cross-Domain Linguistic Steganalysiscited by 0
  28. 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMscited by 0
  29. 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challengescited by 0
  30. 2026On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generatorscited by 0