README: Robust Error-Aware Digital Signature Framework via Deep Watermarking Model
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Deep learning-based watermarking has emerged as a promising solution for robust image authentication and protection. However, existing models are limited by low embedding capacity and vulnerability to bit-level errors, making them unsuitable for cryptographic applications such as digital signatures, which require over 2048 bits of error-free data. In this paper, we propose README (Robust Error-Aware Digital Signature via Deep WaterMarking ModEl), a novel framework that enables robust, verifiable, and error-tolerant digital signatures within images. Our method combines a simple yet effective cropping-based capacity scaling mechanism with ERPA (ERror PAinting Module), a lightweight error correction module designed to localize and correct bit errors using Distinct Circular Subsum Sequences (DCSS). Without requiring any fine-tuning of existing pretrained watermarking models, README significantly boosts the zero-bit-error image rate (Z.B.I.R) from 1.2% to 86.3% when embedding 2048-bit digital signatures into a single image, even under real-world distortions. Moreover, our use of perceptual hash-based signature verification ensures public verifiability and robustness against tampering. The proposed framework unlocks a new class of high-assurance applications for deep watermarking, bridging the gap between signal-level watermarking and cryptographic security.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 9 of its 29 references that are in the map. First posted on arXiv 6 Jul 2025.
Builds on
9 of 29 references.
References · 9
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
- 2017End-to-end Trained CNN Encode-Decoder Networks for Image Steganographycited by 18
- 2025On the Difficulty of Constructing a Robust and Publicly-Detectable Watermarkcited by 9
- 2019Hybrid blind robust image watermarking technique based on DFT-DCT and Arnold transformcited by 8
- 2025Deep Learning-based Dual Watermarking for Image Copyright Protection and Authenticationcited by 3
- 2025SCReedSolo: A Secure and Robust LSB Image Steganography Framework with Randomized Symmetric Encryption and Reed-Solomon Codingcited by 1
Built on by
Not cited yet.