All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splatting
Not on the map. Why?
Abstract (arXiv)
Recent advances in 3D Gaussian Splatting (3DGS) have revolutionized scene reconstruction, opening new possibilities for 3D steganography by hiding 3D secrets within 3D covers. The key challenge in steganography is ensuring imperceptibility while maintaining high-fidelity reconstruction. However, existing methods often suffer from detectability risks and utilize only suboptimal 3DGS features, limiting their full potential. We propose a novel end-to-end key-secured 3D steganography framework (KeySS) that jointly optimizes a 3DGS model and a key-secured decoder for secret reconstruction. Our approach reveals that Gaussian features contribute unequally to secret hiding. The framework incorporates a key-controllable mechanism enabling multi-secret hiding and unauthorized access prevention, while systematically exploring optimal feature update to balance fidelity and security. To rigorously evaluate steganographic imperceptibility beyond conventional 2D metrics, we introduce 3D-Sinkhorn distance analysis, which quantifies distributional differences between original and steganographic Gaussian parameters in the representation space. Extensive experiments demonstrate that our method achieves state-of-the-art performance in both cover and secret reconstruction while maintaining high security levels, advancing the field of 3D steganography. Code is available at https://github.com/RY-Paper/KeySS
Key facts. Cited by 15 papers in the map (data through 7 Oct 2026). Builds on 24 of its 52 references that are in the map. First posted on arXiv 10 Mar 2025.
Builds on
24 of 52 references.
References · 24
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,141
- 2016PointNet: Deep Learning on Point Sets for 3D Classification and Segmentationcited by 5,223
- 2013Sinkhorn Distances: Lightspeed Computation of Optimal Transportation Distancescited by 2,277
- 2021Mip-NeRF 360: Unbounded Anti-Aliased Neural Radiance Fieldscited by 2,013
- 2023Mip-Splatting: Alias-free 3D Gaussian Splattingcited by 661
- 2022Latent-NeRF for Shape-Guided Generation of 3D Shapes and Texturescited by 506
- 2023LangSplat: 3D Language Gaussian Splattingcited by 410
- 2022NoPe-NeRF: Optimising Neural Radiance Field with No Pose Priorcited by 235
- 2022NeRF: Neural Radiance Field in 3D Vision: A Comprehensive Review (Updated Post-Gaussian Splatting)cited by 156
- 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advancescited by 105
- 20243D Gaussian as a New Era: A Surveycited by 102
12 more
- 2023CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganographycited by 50
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 33
- 2022StegaNeRF: Embedding Invisible Information within Neural Radiance Fieldscited by 32
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2014StegExpose - A Tool for Detecting LSB Steganographycited by 25
- 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 25
- 2021Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderingscited by 23
- 2023Large-capacity and Flexible Video Steganography via Invertible Neural Networkcited by 20
- 2024Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Modelcited by 18
- 2024Generative Text Steganography with Large Language Modelcited by 16
- 2021Three-Dimensional Mesh Steganography and Steganalysis: A Reviewcited by 5
- 2024WaSt-3D: Wasserstein-2 Distance for Scene-to-Scene Stylization on 3D Gaussianscited by 3
Built on by
Citing papers per year: 2025: 10; 2026: 5.
15 papers.
Sort:
By area:
- 2025Does FLUX Already Know How to Perform Physically Plausible Image Composition?cited by 30
- 2025DragFlow: Unleashing DiT Priors with Region Based Supervision for Drag Editingcited by 29
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 9
- 2025Intentional Gesture: Deliver Your Intentions with Gestures for Speechcited by 8
- 2025Diffusion-Based Image Editing for Breaking Robust Watermarkscited by 4
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolutioncited by 2
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarkingcited by 2
- 2026GraphiContact: Pose-aware Human-Scene Robust Contact Perception for Interactive Systemscited by 1
- 2025FADE: Adversarial Concept Erasure in Flow Modelscited by 0
- 2025Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustnesscited by 0
- 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generationcited by 0
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Derainingcited by 0
3 more
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editingcited by 0
- 2026ReconMIL: Synergizing Latent Space Reconstruction with Bi-Stream Mamba for Whole Slide Image Analysiscited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splattingcited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026ReconMIL: Synergizing Latent Space Reconstruction with Bi-Stream Mamba for Whole Slide Image Analysis20 Mar 2026
- 2026GraphiContact: Pose-aware Human-Scene Robust Contact Perception for Interactive Systems19 Mar 2026
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing5 Mar 2026
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking24 Feb 2026
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Deraining8 Oct 2025
- 2025Diffusion-Based Image Editing for Breaking Robust Watermarks7 Oct 2025
- 2025DragFlow: Unleashing DiT Priors with Region Based Supervision for Drag Editing2 Oct 2025
- 2025Does FLUX Already Know How to Perform Physically Plausible Image Composition?25 Sep 2025
- 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generation24 Sep 2025
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolution23 Sep 2025
- 2025DragFlow: Unleashing DiT Priors with Region Based Supervision for Drag Editingcited by 29
- 2025Diffusion-Based Image Editing for Breaking Robust Watermarkscited by 4
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarkingcited by 2
- 2025FADE: Adversarial Concept Erasure in Flow Modelscited by 0
- 2025Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustnesscited by 0
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editingcited by 0
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing5 Mar 2026
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking24 Feb 2026
- 2025Diffusion-Based Image Editing for Breaking Robust Watermarks7 Oct 2025
- 2025DragFlow: Unleashing DiT Priors with Region Based Supervision for Drag Editing2 Oct 2025
- 2025Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustness15 Sep 2025
- 2025FADE: Adversarial Concept Erasure in Flow Models16 Jul 2025
- 2025Does FLUX Already Know How to Perform Physically Plausible Image Composition?cited by 30
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 9
- 2025Intentional Gesture: Deliver Your Intentions with Gestures for Speechcited by 8
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolutioncited by 2
- 2026GraphiContact: Pose-aware Human-Scene Robust Contact Perception for Interactive Systemscited by 1
- 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generationcited by 0
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Derainingcited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splattingcited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026GraphiContact: Pose-aware Human-Scene Robust Contact Perception for Interactive Systems19 Mar 2026
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
- 2025DeRainMamba: A Frequency-Aware State Space Model with Detail Enhancement for Image Deraining8 Oct 2025
- 2025Does FLUX Already Know How to Perform Physically Plausible Image Composition?25 Sep 2025
- 2025Robust RGB-T Tracking via Learnable Visual Fourier Prompt Fine-tuning and Modality Fusion Prompt Generation24 Sep 2025
- 2025SSCM: A Spatial-Semantic Consistent Model for Multi-Contrast MRI Super-Resolution23 Sep 2025
- 2025Intentional Gesture: Deliver Your Intentions with Gestures for Speech21 May 2025