Watermarking Language Models with Error Correcting Codes
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Recent progress in large language models enables the creation of realistic machine-generated content. Watermarking is a promising approach to distinguish machine-generated text from human text, embedding statistical signals in the output that are ideally undetectable to humans. We propose a watermarking framework that encodes such signals through an error correcting code. Our method, termed robust binary code (RBC) watermark, introduces no noticeable degradation in quality. We evaluate our watermark on base and instruction fine-tuned models and find that our watermark is robust to edits, deletions, and translations. We provide an information-theoretic perspective on watermarking, a powerful statistical test for detection and for generating p-values, and theoretical guarantees. Our empirical findings suggest our watermark is fast, powerful, and robust, comparing favorably to the state-of-the-art.
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 22 of its 45 references that are in the map. First posted on arXiv 12 Jun 2024.
Builds on
22 of 45 references.
Closest ancestors · 13
Same direction, newest first
- 2024Watermark Stealing in Large Language Models29 Feb
- 2024Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models28 Feb
- 2024Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Models21 Feb
- 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
- 2024Pseudorandom Error-Correcting Codes14 Feb
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
1 more
- 2023A Watermark for Large Language Models24 Jan
Other references · 9
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2023Mistral 7Bcited by 3,065
- 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,168
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2019ELI5: Long Form Question Answeringcited by 567
- 2019Defending Against Neural Fake Newscited by 553
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2019Neural Linguistic Steganographycited by 73
- 2022Perfectly Secure Steganography Using Minimum Entropy Couplingcited by 42
Built on by
Citing papers per year: 2024: 1; 2025: 2; 2026: 7.
10 papers.
- 2025Optimized Couplings for Watermarking Large Language Modelscited by 9
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictionscited by 1
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarkingcited by 1
- 2026WorldCup Sampling for Multi-bit LLM Watermarkingcited by 0
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraintscited by 0
- 2026QuantileMark: A Message-Symmetric Multi-bit Watermark for LLMscited by 0
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agentscited by 0
- 2026CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarkingcited by 0
- 2026Anchor-ECC: Local Integrity Checking for Watermarked LLM Outputs via Error-Correcting Codescited by 0
- 2026Anchor-ECC: Local Integrity Checking for Watermarked LLM Outputs via Error-Correcting Codes30 Sep 2026
- 2026CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking23 Jun 2026
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agents9 May 2026
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking1 May 2026
- 2026QuantileMark: A Message-Symmetric Multi-bit Watermark for LLMs15 Apr 2026
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraints9 Apr 2026
- 2026WorldCup Sampling for Multi-bit LLM Watermarking2 Feb 2026
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions6 Jun 2025
- 2025Optimized Couplings for Watermarking Large Language Models13 May 2025
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024