Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integrity
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Semantic watermarking techniques for latent diffusion models (LDMs) are robust against regeneration attacks, but often suffer from detection performance degradation due to the loss of frequency integrity. To tackle this problem, we propose a novel embedding method called Hermitian Symmetric Fourier Watermarking (SFW), which maintains frequency integrity by enforcing Hermitian symmetry. Additionally, we introduce a center-aware embedding strategy that reduces the vulnerability of semantic watermarking due to cropping attacks by ensuring robust information retention. To validate our approach, we apply these techniques to existing semantic watermarking schemes, enhancing their frequency-domain structures for better robustness and retrieval accuracy. Extensive experiments demonstrate that our methods achieve state-of-the-art verification and identification performance, surpassing previous approaches across various attack scenarios. Ablation studies confirm the impact of SFW on detection capabilities, the effectiveness of the center-aware embedding against cropping, and how message capacity influences identification accuracy. Notably, our method achieves the highest detection accuracy while maintaining superior image fidelity, as evidenced by FID and CLIP scores. Conclusively, our proposed SFW is shown to be an effective framework for balancing robustness and image fidelity, addressing the inherent trade-offs in semantic watermarking. Code available at https://github.com/thomas11809/SFWMark
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 34 of its 56 references that are in the map. First posted on arXiv 9 Sep 2025.
Builds on
34 of 56 references.
Closest ancestors · 7
Same direction, newest first
- 2024WMAdapter: Adding WaterMark Control to Latent Diffusion Models12 Jun
- 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA18 May
- 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
- 2024Latent Watermark: Inject and Detect Watermarks in Latent Diffusion Space30 Mar
- 2024Attack-Resilient Image Watermarking Using Stable Diffusion8 Jan
- 2023DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models25 May
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
Other references · 27
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
- 2022Reproducible scaling laws for contrastive language-image learningcited by 1,173
- 2018Variational image compression with a scale hyperpriorcited by 935
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 590
15 more
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 379
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 134
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 111
- 2021Watermarking Images in Self-Supervised Latent Spacescited by 94
- 2024RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identificationcited by 91
- 2020Distortion Agnostic Deep Watermarkingcited by 90
- 2018ReDMark: Framework for Residual Diffusion Watermarking on Deep Networkscited by 57
- 2023RoSteALS: Robust Steganography using Autoencoder Latent Spacecited by 57
- 2024LaWa: Using Latent Space for In-Generation Image Watermarkingcited by 28
- 2024ProMark: Proactive Diffusion Watermarking for Causal Attributioncited by 17
- 2022De-END: Decoder-driven Watermarking Networkcited by 12
- 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Spacecited by 8
Built on by
Citing papers per year: 2025: 2; 2026: 12.
14 papers.
Sort:
By area:
- 2026SHIFT: Stochastic Hidden-Trajectory Deflection for Removing Diffusion-based Watermarkcited by 4
- 2026RAVEN: Erasing Invisible Watermarks via Novel View Synthesiscited by 2
- 2026OSI: One-step Inversion Excels in Extracting Diffusion Watermarkscited by 2
- 2025Low-Compute Watermark Removal via Dual-Domain Natural Projectioncited by 1
- 2025TokenPure: Watermark Removal through Tokenized Appearance and Structural Guidancecited by 1
- 2026PhaseMark: A Post-hoc, Optimization-Free Watermarking of AI-generated Images in the Latent Frequency Domaincited by 1
- 2026Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspectivecited by 1
- 2026Luminark: Training-free, Probabilistically-Certified Watermarking for General Vision Generative Modelscited by 0
- 2026MarkCleaner: High-Fidelity Watermark Removal via Imperceptible Micro-Geometric Perturbationcited by 0
- 2026ALIEN: Analytic Latent Watermarking for Controllable Generationcited by 0
- 2026BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Modelscited by 0
- 2026Correlation-Aware and Gaussianity-Preserving Robust Latent Angular Watermarking for Diffusion Modelscited by 0
- 2026Residual Transferability in Neural Image Watermarking26 Sep 2026
- 2026DeepFreqMark: End-To-End Learnable Frequency-Domain Watermarking with Spherical Attack Simulation for Latent Diffusion Models10 Aug 2026
- 2026Correlation-Aware and Gaussianity-Preserving Robust Latent Angular Watermarking for Diffusion Models24 Jul 2026
- 2026BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Models2 Jul 2026
- 2026Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective29 Jun 2026
- 2026SHIFT: Stochastic Hidden-Trajectory Deflection for Removing Diffusion-based Watermark31 Mar 2026
- 2026OSI: One-step Inversion Excels in Extracting Diffusion Watermarks10 Feb 2026
- 2026ALIEN: Analytic Latent Watermarking for Controllable Generation5 Feb 2026
- 2026MarkCleaner: High-Fidelity Watermark Removal via Imperceptible Micro-Geometric Perturbation2 Feb 2026
- 2026PhaseMark: A Post-hoc, Optimization-Free Watermarking of AI-generated Images in the Latent Frequency Domain19 Jan 2026
- 2026RAVEN: Erasing Invisible Watermarks via Novel View Synthesis13 Jan 2026
- 2026Luminark: Training-free, Probabilistically-Certified Watermarking for General Vision Generative Models3 Jan 2026
- 2026PhaseMark: A Post-hoc, Optimization-Free Watermarking of AI-generated Images in the Latent Frequency Domaincited by 1
- 2026Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspectivecited by 1
- 2026BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Modelscited by 0
- 2026Correlation-Aware and Gaussianity-Preserving Robust Latent Angular Watermarking for Diffusion Modelscited by 0
- 2026DeepFreqMark: End-To-End Learnable Frequency-Domain Watermarking with Spherical Attack Simulation for Latent Diffusion Modelscited by 0
- 2026DeepFreqMark: End-To-End Learnable Frequency-Domain Watermarking with Spherical Attack Simulation for Latent Diffusion Models10 Aug 2026
- 2026Correlation-Aware and Gaussianity-Preserving Robust Latent Angular Watermarking for Diffusion Models24 Jul 2026
- 2026BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Models2 Jul 2026
- 2026Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective29 Jun 2026
- 2026PhaseMark: A Post-hoc, Optimization-Free Watermarking of AI-generated Images in the Latent Frequency Domain19 Jan 2026
- 2026SHIFT: Stochastic Hidden-Trajectory Deflection for Removing Diffusion-based Watermarkcited by 4
- 2025TokenPure: Watermark Removal through Tokenized Appearance and Structural Guidancecited by 1
- 2026Luminark: Training-free, Probabilistically-Certified Watermarking for General Vision Generative Modelscited by 0
- 2026ALIEN: Analytic Latent Watermarking for Controllable Generationcited by 0
- 2026SHIFT: Stochastic Hidden-Trajectory Deflection for Removing Diffusion-based Watermark31 Mar 2026
- 2026ALIEN: Analytic Latent Watermarking for Controllable Generation5 Feb 2026
- 2026Luminark: Training-free, Probabilistically-Certified Watermarking for General Vision Generative Models3 Jan 2026
- 2025TokenPure: Watermark Removal through Tokenized Appearance and Structural Guidance1 Dec 2025
- 2026RAVEN: Erasing Invisible Watermarks via Novel View Synthesiscited by 2
- 2026OSI: One-step Inversion Excels in Extracting Diffusion Watermarkscited by 2
- 2025Low-Compute Watermark Removal via Dual-Domain Natural Projectioncited by 1
- 2026MarkCleaner: High-Fidelity Watermark Removal via Imperceptible Micro-Geometric Perturbationcited by 0
- 2026Residual Transferability in Neural Image Watermarkingcited by 0
- 2026Residual Transferability in Neural Image Watermarking26 Sep 2026
- 2026OSI: One-step Inversion Excels in Extracting Diffusion Watermarks10 Feb 2026
- 2026MarkCleaner: High-Fidelity Watermark Removal via Imperceptible Micro-Geometric Perturbation2 Feb 2026
- 2026RAVEN: Erasing Invisible Watermarks via Novel View Synthesis13 Jan 2026
- 2025Low-Compute Watermark Removal via Dual-Domain Natural Projection8 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models
- 2025SEAL: Semantic Aware Image Watermarking
- 2026Diffusion-Generated Image Watermarking: A Two-Axis Taxonomy and Three Protocol-Bounded Case Studies
- 2026SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking
- 2025Towards A Correct Usage of Cryptography in Semantic Watermarks for Diffusion Models
- 2026Breaking Watermarks in the Frequency Domain: A Modulated Diffusion Attack Framework
- 2026Breaking Semantic-Aware Watermarks via LLM-Guided Coherence-Preserving Semantic Injection
- 2026On the Intrinsic Limited Robustness of Latent-Based Watermarking