Perfectly Secure Steganography Using Minimum Entropy Coupling
Not on the map. Why?
Abstract (arXiv)
Steganography is the practice of encoding secret information into innocuous content in such a manner that an adversarial third party would not realize that there is hidden meaning. While this problem has classically been studied in security literature, recent advances in generative models have led to a shared interest among security and machine learning researchers in developing scalable steganography techniques. In this work, we show that a steganography procedure is perfectly secure under Cachin (1998)'s information-theoretic model of steganography if and only if it is induced by a coupling. Furthermore, we show that, among perfectly secure procedures, a procedure maximizes information throughput if and only if it is induced by a minimum entropy coupling. These insights yield what are, to the best of our knowledge, the first steganography algorithms to achieve perfect security guarantees for arbitrary covertext distributions. To provide empirical validation, we compare a minimum entropy coupling-based approach to three modern baselines -- arithmetic coding, Meteor, and adaptive dynamic grouping -- using GPT-2, WaveRNN, and Image Transformer as communication channels. We find that the minimum entropy coupling-based approach achieves superior encoding efficiency, despite its stronger security constraints. In aggregate, these results suggest that it may be natural to view information-theoretic steganography through the lens of minimum entropy coupling.
Key facts. Cited by 42 papers in the map (data through 7 Oct 2026). Builds on 12 of its 29 references that are in the map. First posted on arXiv 24 Oct 2022.
Builds on
12 of 29 references.
References · 12
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2017Natural TTS Synthesis by Conditioning WaveNet on Mel Spectrogram Predictionscited by 800
- 2018Image Transformercited by 770
- 2018Efficient Neural Audio Synthesiscited by 218
- 2021TorchAudio: Building Blocks for Audio and Speech Processingcited by 83
- 2019Neural Linguistic Steganographycited by 73
- 2021Provably Secure Generative Linguistic Steganographycited by 34
- 2019Towards Near-imperceptible Steganographic Textcited by 30
- 2016Entropic Causal Inferencecited by 27
- 2021Communicating via Markov Decision Processescited by 9
- 2019Minimum--Entropy Couplings and their Applicationscited by 7
Built on by
Citing papers per year: 2023: 2; 2024: 12; 2025: 10; 2026: 18.
42 papers.
Sort:
By area:
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 52
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Modelscited by 51
- 2024Pseudorandom Error-Correcting Codescited by 40
- 2024Prompting a Pretrained Transformer Can Be a Universal Approximatorcited by 25
- 2024Excuse me, sir? Your language model is leaking (information)cited by 11
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2025The Steganographic Potentials of Language Modelscited by 10
- 2024Towards Measuring Goal-Directedness in AI Systemscited by 7
- 2025TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agentcited by 7
- 2025All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Languagecited by 7
30 more
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoringcited by 6
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretabilitycited by 6
- 2023Exploring the Relevance of Data Privacy-Enhancing Technologies for AI Governance Use Casescited by 5
- 2024Provably Secure Disambiguating Neural Linguistic Steganographycited by 5
- 2024OD-Stega: LLM-Based Relatively Secure Steganography via Optimized Distributionscited by 5
- 2024Minimum Entropy Coupling with Bottleneckcited by 5
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systemscited by 5
- 2025Scheming Ability in LLM-to-LLM Strategic Interactionscited by 4
- 2026Voluntary Collusion with Secret Tools in Competing LLM Agentscited by 4
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuitscited by 3
- 2025PSyDUCK: Training-Free Steganography for Latent Diffusioncited by 3
- 2026Efficient Provably Secure Linguistic Steganography via Range Codingcited by 3
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Modelscited by 2
- 2025Learning to Match Unpaired Data with Minimum Entropy Couplingcited by 2
- 2025Provable Secure Steganography Based on Adaptive Dynamic Samplingcited by 2
- 2025Consensus Sampling for Safer Generative AIcited by 2
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganographycited by 2
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egresscited by 2
- 2025A High-Capacity and Secure Disambiguation Algorithm for Neural Linguistic Steganographycited by 1
- 2026Steganography Without Modification: Hidden Communication via LLM Seedscited by 1
- 2026A Note on the Strategic Confinement Problemcited by 1
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systemscited by 1
- 2026NEST: Nascent Encoded Steganographic Thoughtscited by 0
- 2026Text Steganography with Dynamic Codebook and Multimodal Large Language Modelcited by 0
- 2026Breaking the Finite-Sample Barrier in Entropy Couplingcited by 0
- 2026Cordyceps: Covert Control Attacks on LLMs via Data Poisoningcited by 0
- 2026REED: Post-Training Representation Editing for Cross-Domain Linguistic Steganalysiscited by 0
- 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMscited by 0
- 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challengescited by 0
- 2026On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generatorscited by 0
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generators21 Sep 2026
- 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challenges29 Aug 2026
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systems25 Jun 2026
- 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMs8 Jun 2026
- 2026Steganography Without Modification: Hidden Communication via LLM Seeds8 Jun 2026
- 2026A Note on the Strategic Confinement Problem7 Jun 2026
- 2026REED: Post-Training Representation Editing for Cross-Domain Linguistic Steganalysis27 May 2026
- 2026Voluntary Collusion with Secret Tools in Competing LLM Agents26 May 2026
- 2026Cordyceps: Covert Control Attacks on LLMs via Data Poisoning26 May 2026
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egress20 May 2026
- 2026Breaking the Finite-Sample Barrier in Entropy Coupling15 May 2026
30 more
- 2026Text Steganography with Dynamic Codebook and Multimodal Large Language Model22 Apr 2026
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganography10 Apr 2026
- 2026Efficient Provably Secure Linguistic Steganography via Range Coding9 Apr 2026
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretability1 Apr 2026
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring26 Feb 2026
- 2026NEST: Nascent Encoded Steganographic Thoughts15 Feb 2026
- 2025Consensus Sampling for Safer Generative AI12 Nov 2025
- 2025Scheming Ability in LLM-to-LLM Strategic Interactions11 Oct 2025
- 2025All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Language10 Oct 2025
- 2025A High-Capacity and Secure Disambiguation Algorithm for Neural Linguistic Steganography26 Sep 2025
- 2025TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agent26 May 2025
- 2025The Steganographic Potentials of Language Models6 May 2025
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents4 May 2025
- 2025Provable Secure Steganography Based on Adaptive Dynamic Sampling17 Apr 2025
- 2025Learning to Match Unpaired Data with Minimum Entropy Coupling11 Mar 2025
- 2025PSyDUCK: Training-Free Steganography for Latent Diffusion31 Jan 2025
- 2024Minimum Entropy Coupling with Bottleneck29 Oct 2024
- 2024Towards Measuring Goal-Directedness in AI Systems7 Oct 2024
- 2024OD-Stega: LLM-Based Relatively Secure Steganography via Optimized Distributions6 Oct 2024
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs2 Oct 2024
- 2024Watermarking Language Models with Error Correcting Codes12 Jun 2024
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models9 Jun 2024
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits3 Jun 2024
- 2024Provably Secure Disambiguating Neural Linguistic Steganography26 Mar 2024
- 2024Prompting a Pretrained Transformer Can Be a Universal Approximator22 Feb 2024
- 2024Pseudorandom Error-Correcting Codes14 Feb 2024
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb 2024
- 2024Excuse me, sir? Your language model is leaking (information)18 Jan 2024
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug 2023
- 2023Exploring the Relevance of Data Privacy-Enhancing Technologies for AI Governance Use Cases15 Mar 2023
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Modelscited by 51
- 2024Pseudorandom Error-Correcting Codescited by 40
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuitscited by 3
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Modelscited by 2
- 2026Cordyceps: Covert Control Attacks on LLMs via Data Poisoningcited by 0
- 2026On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generatorscited by 0
- 2026On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generators21 Sep 2026
- 2026Cordyceps: Covert Control Attacks on LLMs via Data Poisoning26 May 2026
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents4 May 2025
- 2024Watermarking Language Models with Error Correcting Codes12 Jun 2024
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models9 Jun 2024
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits3 Jun 2024
- 2024Pseudorandom Error-Correcting Codes14 Feb 2024
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug 2023
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretabilitycited by 6
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systemscited by 5
- 2026Voluntary Collusion with Secret Tools in Competing LLM Agentscited by 4
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egresscited by 2
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systemscited by 1
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systems25 Jun 2026
- 2026Voluntary Collusion with Secret Tools in Competing LLM Agents26 May 2026
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egress20 May 2026
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretability1 Apr 2026
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb 2024
- 2025PSyDUCK: Training-Free Steganography for Latent Diffusion31 Jan 2025
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 52
- 2024Prompting a Pretrained Transformer Can Be a Universal Approximatorcited by 25
- 2024Excuse me, sir? Your language model is leaking (information)cited by 11
- 2024Towards Measuring Goal-Directedness in AI Systemscited by 7
- 2025TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agentcited by 7
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoringcited by 6
- 2023Exploring the Relevance of Data Privacy-Enhancing Technologies for AI Governance Use Casescited by 5
- 2024Provably Secure Disambiguating Neural Linguistic Steganographycited by 5
- 2024OD-Stega: LLM-Based Relatively Secure Steganography via Optimized Distributionscited by 5
- 2024Minimum Entropy Coupling with Bottleneckcited by 5
- 2025Scheming Ability in LLM-to-LLM Strategic Interactionscited by 4
- 2026Efficient Provably Secure Linguistic Steganography via Range Codingcited by 3
12 most cited of 24 All 24 (JSON)
- 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challenges29 Aug 2026
- 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMs8 Jun 2026
- 2026Steganography Without Modification: Hidden Communication via LLM Seeds8 Jun 2026
- 2026A Note on the Strategic Confinement Problem7 Jun 2026
- 2026REED: Post-Training Representation Editing for Cross-Domain Linguistic Steganalysis27 May 2026
- 2026Breaking the Finite-Sample Barrier in Entropy Coupling15 May 2026
- 2026Text Steganography with Dynamic Codebook and Multimodal Large Language Model22 Apr 2026
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganography10 Apr 2026
- 2026Efficient Provably Secure Linguistic Steganography via Range Coding9 Apr 2026
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring26 Feb 2026
- 2025Consensus Sampling for Safer Generative AI12 Nov 2025
- 2025Scheming Ability in LLM-to-LLM Strategic Interactions11 Oct 2025
12 newest of 24 All 24 (JSON)