mlsanityData to 14 Oct 2026

Optimized Couplings for Watermarking Large Language Models

arXiv 2505.08878 ↗First posted 13 May 2025cs.CR cs.AI cs.ITcited by 9

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Large-language models (LLMs) are now able to produce text that is, in many cases, seemingly indistinguishable from human-generated content. This has fueled the development of watermarks that imprint a ``signal'' in LLM-generated text with minimal perturbation of an LLM's output. This paper provides an analysis of text watermarking in a one-shot setting. Through the lens of hypothesis testing with side information, we formulate and analyze the fundamental trade-off between watermark detection power and distortion in generated textual quality. We argue that a key component in watermark design is generating a coupling between the side information shared with the watermark detector and a random partition of the LLM vocabulary. Our analysis identifies the optimal coupling and randomization strategy under the worst-case LLM next-token distribution that satisfies a min-entropy constraint. We provide a closed-form expression of the resulting detection rate under the proposed scheme and quantify the cost in a max-min sense. Finally, we provide an array of numerical results, comparing the proposed scheme with the theoretical optimum and existing schemes, in both synthetic data and LLM watermarking. Our code is available at https://github.com/Carol-Long/CC_Watermark

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 26 of its 47 references that are in the map. First posted on arXiv 13 May 2025.

Builds on

26 of 47 references.

Closest ancestors · 19

Same direction, newest first

  1. 2024SoK: Watermarking for AI-Generated Content27 Nov
  2. 2024Debiasing Watermarks for Large Language Models via Maximal Coupling17 Nov
  3. 2024A Watermark for Black-Box Language Models2 Oct
  4. 2024Watermarking Language Models with Error Correcting Codes12 Jun
  5. 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
  6. 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules1 Apr
  7. 2024Adaptive Text Watermark for Large Language Models25 Jan
  8. 2023Towards Optimal Statistical Watermarking13 Dec
  9. 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
  10. 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
  11. 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
  12. 2023Unbiased Watermark for Large Language Models22 Sep
7 more
  1. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  2. 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
  3. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  4. 2023On the Reliability of Watermarks for Large Language Models7 Jun
  5. 2023Undetectable Watermarks for Language Models25 May
  6. 2023Watermarking Text Generated by Black-Box Language Models14 May
  7. 2023A Watermark for Large Language Models24 Jan

Other references · 7

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  3. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  4. 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,336
  5. 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
  6. 2019Rethinking Lossy Compression: The Rate-Distortion-Perception Tradeoffcited by 211
  7. 2021A coding theorem for the rate-distortion-perception functioncited by 30

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 7.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach
  2. 2025Entropy-Guided Watermarking for LLMs: A Test-Time Framework for Robust and Traceable Text Generation
  3. 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
  4. 2025Optimal Detection for Language Watermarks with Pseudorandom Collision
  5. 2023Necessary and Sufficient Watermark for Large Language Models
  6. 2025PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs
  7. 2023Baselines for Identifying Watermarked Large Language Models
  8. 2025Distributional Information Embedding: A Framework for Multi-bit Watermarking