Innamark: A Whitespace Replacement Information-Hiding Method
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Large language models (LLMs) have gained significant popularity in recent years. Differentiating between a text written by a human and one generated by an LLM has become almost impossible. Information-hiding techniques such as digital watermarking or steganography can help by embedding information inside text in a form that is unlikely to be noticed. However, existing techniques, such as linguistic-based or format-based methods, change the semantics or cannot be applied to pure, unformatted text. In this paper, we introduce a novel method for information hiding called Innamark, which can conceal any byte-encoded sequence within a sufficiently long cover text. This method is implemented as a multi-platform library using the Kotlin programming language, which is accompanied by a command-line tool and a web interface. By substituting conventional whitespace characters with visually similar Unicode whitespace characters, our proposed scheme preserves the semantics of the cover text without changing the number of characters. Furthermore, we propose a specified structure for secret messages that enables configurable compression, encryption, hashing, and error correction. An experimental benchmark comparison on a dataset of 1 000 000 Wikipedia articles compares ten algorithms. The results demonstrate the robustness of our proposed Innamark method in various applications and the imperceptibility of its watermarks to humans. We discuss the limits to the embedding capacity and robustness of the algorithm and how these could be addressed in future work.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 5 of its 64 references that are in the map. First posted on arXiv 18 Feb 2025.
Builds on
5 of 64 references.
Closest ancestors · 3
Same direction, newest first
- 2024Pseudorandom Error-Correcting Codes14 Feb
- 2023Undetectable Watermarks for Language Models25 May
- 2023A Watermark for Large Language Models24 Jan
Other references · 2
Built on by
Citing papers per year: 2025: 2; 2026: 1.
3 papers.
- 2025Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Techniquecited by 4
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematizationcited by 1
- 2025Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Modelscited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2025Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models15 Dec 2025
- 2025Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Technique7 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2026ByteMark: A Unified Byte-Level Watermark for Detection Across Language Models
- 2024Duwak: Dual Watermarks in Large Language Models
- 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs
- 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models
- 2026OpenStamp: A Watermark for Open-Source Language Models
- 2024PostMark: A Robust Blackbox Watermark for Large Language Models
- 2024Excuse me, sir? Your language model is leaking (information)