Optimized Couplings for Watermarking Large Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Large-language models (LLMs) are now able to produce text that is, in many cases, seemingly indistinguishable from human-generated content. This has fueled the development of watermarks that imprint a ``signal'' in LLM-generated text with minimal perturbation of an LLM's output. This paper provides an analysis of text watermarking in a one-shot setting. Through the lens of hypothesis testing with side information, we formulate and analyze the fundamental trade-off between watermark detection power and distortion in generated textual quality. We argue that a key component in watermark design is generating a coupling between the side information shared with the watermark detector and a random partition of the LLM vocabulary. Our analysis identifies the optimal coupling and randomization strategy under the worst-case LLM next-token distribution that satisfies a min-entropy constraint. We provide a closed-form expression of the resulting detection rate under the proposed scheme and quantify the cost in a max-min sense. Finally, we provide an array of numerical results, comparing the proposed scheme with the theoretical optimum and existing schemes, in both synthetic data and LLM watermarking. Our code is available at https://github.com/Carol-Long/CC_Watermark
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 26 of its 47 references that are in the map. First posted on arXiv 13 May 2025.
Builds on
26 of 47 references.
Closest ancestors · 19
Same direction, newest first
- 2024SoK: Watermarking for AI-Generated Content27 Nov
- 2024Debiasing Watermarks for Large Language Models via Maximal Coupling17 Nov
- 2024A Watermark for Black-Box Language Models2 Oct
- 2024Watermarking Language Models with Error Correcting Codes12 Jun
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules1 Apr
- 2024Adaptive Text Watermark for Large Language Models25 Jan
- 2023Towards Optimal Statistical Watermarking13 Dec
- 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
- 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
- 2023Unbiased Watermark for Large Language Models22 Sep
7 more
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023Watermarking Text Generated by Black-Box Language Models14 May
- 2023A Watermark for Large Language Models24 Jan
Other references · 7
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,336
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2019Rethinking Lossy Compression: The Rate-Distortion-Perception Tradeoffcited by 211
- 2021A coding theorem for the rate-distortion-perception functioncited by 30
Built on by
Citing papers per year: 2025: 2; 2026: 7.
9 papers.
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraintscited by 16
- 2026A Unified Framework for LLM Watermarkscited by 5
- 2026ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transportcited by 3
- 2026Refined Detection for Gumbel Watermarkingcited by 2
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictionscited by 1
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Modelscited by 1
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraintscited by 0
- 2026Watermarkable Multi-Draft Speculative Sampling via Poisson Processescited by 0
- 2026On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generatorscited by 0
- 2026On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generators21 Sep 2026
- 2026Watermarkable Multi-Draft Speculative Sampling via Poisson Processes18 Sep 2026
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraints9 Apr 2026
- 2026Refined Detection for Gumbel Watermarking31 Mar 2026
- 2026ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport6 Feb 2026
- 2026A Unified Framework for LLM Watermarks6 Feb 2026
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models1 Feb 2026
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints25 Sep 2025
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions6 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach
- 2025Entropy-Guided Watermarking for LLMs: A Test-Time Framework for Robust and Traceable Text Generation
- 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
- 2025Optimal Detection for Language Watermarks with Pseudorandom Collision
- 2023Necessary and Sufficient Watermark for Large Language Models
- 2025PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs
- 2023Baselines for Identifying Watermarked Large Language Models
- 2025Distributional Information Embedding: A Framework for Multi-bit Watermarking