mlsanityData to 7 Oct 2026

METR: Image Watermarking with Large Number of Unique Messages

arXiv 2408.08340 ↗First posted 15 Aug 2024cs.LG cs.CR cs.CVcited by 3

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Improvements in diffusion models have boosted the quality of image generation, which has led researchers, companies, and creators to focus on improving watermarking algorithms. This provision would make it possible to clearly identify the creators of generative art. The main challenges that modern watermarking algorithms face have to do with their ability to withstand attacks and encrypt many unique messages, such as user IDs. In this paper, we present METR: Message Enhanced Tree-Ring, which is an approach that aims to address these challenges. METR is built on the Tree-Ring watermarking algorithm, a technique that makes it possible to encode multiple distinct messages without compromising attack resilience or image quality. This ensures the suitability of this watermarking algorithm for any Diffusion Model. In order to surpass the limitations on the quantity of encoded messages, we propose METR++, an enhanced version of METR. This approach, while limited to the Latent Diffusion Model architecture, is designed to inject a virtually unlimited number of unique messages. We demonstrate its robustness to attacks and ability to encrypt many unique messages while preserving image quality, which makes METR and METR++ hold great potential for practical applications in real-world settings. Our code is available at https://github.com/deepvk/metr

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 23 of its 33 references that are in the map. First posted on arXiv 15 Aug 2024.

Builds on

23 of 33 references.

Closest ancestors · 3

Same direction, newest first

  1. 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
  2. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
  3. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar

Other references · 20

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2020Denoising Diffusion Implicit Modelscited by 9,655
  6. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  7. 2022Reproducible scaling laws for contrastive language-image learningcited by 1,163
  8. 2018Variational image compression with a scale hyperpriorcited by 910
  9. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
  10. 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
  11. 2019Robust Invisible Video Watermarking with Attentioncited by 144
  12. 2022High-Resolution Virtual Try-On with Misalignment and Occlusion-Handled Conditionscited by 129
8 more
  1. 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 124
  2. 2023Kandinsky: an Improved Text-to-Image Synthesis with Image Prior and Latent Diffusioncited by 114
  3. 2023Evading Watermark based Detection of AI-Generated Contentcited by 74
  4. 2021A survey of deep neural network watermarking techniquescited by 69
  5. 2022Medical Diffusion: Denoising Diffusion Probabilistic Models for 3D Medical Image Generationcited by 54
  6. 2022Synthetic ID Card Image Generation for Improving Presentation Attack Detectioncited by 18
  7. 2024Comparing the willingness to share for human-generated vs. AI-generated fake newscited by 12
  8. 2021Synthetic Document Generator for Annotation-free Layout Recognitioncited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 3.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Forging Tree-Ring: Reproducing and Instrumenting Black-Box Semantic Watermark Forgery
  2. 2024RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification
  3. 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models
  4. 2025A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks
  5. 2026ShapeMark: Robust and Diversity-Preserving Watermarking for Diffusion Models
  6. 2025MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models
  7. 2025Dynamic watermarks in images generated by diffusion models
  8. 2025Detection Limits and Statistical Separability of Tree Ring Watermarks in Rectified Flow-based Text-to-Image Generation Models