Fast, Secure, and High-Capacity Image Watermarking with Autoencoded Text Vectors
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Most image watermarking systems focus on robustness, capacity, and imperceptibility while treating the embedded payload as meaningless bits. This bit-centric view imposes a hard ceiling on capacity and prevents watermarks from carrying useful information. We propose LatentSeal, which reframes watermarking as semantic communication: a lightweight text autoencoder maps full-sentence messages into a compact 256-dimensional unit-norm latent vector, which is robustly embedded by a finetuned watermark model and secured through a secret, invertible rotation. The resulting system hides full-sentence messages, decodes in real time, and survives valuemetric and geometric attacks. It surpasses prior state of the art in BLEU-4 and Exact Match on several benchmarks, while breaking through the long-standing 256-bit payload ceiling. It also introduces a statistically calibrated score that yields a ROC AUC score of 0.97-0.99, and practical operating points for deployment. By shifting from bit payloads to semantic latent vectors, LatentSeal enables watermarking that is not only robust and high-capacity, but also secure and interpretable, providing a concrete path toward provenance, tamper explanation, and trustworthy AI governance. Models, training and inference code, and data splits will be available upon publication.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 26 of its 31 references that are in the map. First posted on arXiv 1 Oct 2025.
Builds on
26 of 31 references.
References · 26
- 2017Attention Is All You Needcited by 59,932
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2023MagicBrush: A Manually Annotated Dataset for Instruction-Guided Image Editingcited by 615
- 2015Generating Sentences from a Continuous Spacecited by 607
- 2024Smarter, Better, Faster, Longer: A Modern Bidirectional Encoder for Fast, Memory Efficient, and Long Context Finetuning and Inferencecited by 527
- 2023Florence-2: Advancing a Unified Representation for a Variety of Vision Taskscited by 403
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
14 more
- 2019MASS: Masked Sequence to Sequence Pre-training for Language Generationcited by 345
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2019Robust Invisible Video Watermarking with Attentioncited by 144
- 2025HiDream-I1: A High-Efficient Image Generative Foundation Model with Sparse Diffusion Transformercited by 131
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
- 2021Watermarking Images in Self-Supervised Latent Spacescited by 90
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2023TrustMark: Universal Watermarking for Arbitrary Resolution Imagescited by 50
- 2024Watermark Anything with Localized Messagescited by 49
- 2024Video Seal: Open and Efficient Video Watermarkingcited by 45
- 2023LLMZip: Lossless Text Compression using Large Language Modelscited by 44
- 2024Image Watermarks are Removable Using Controllable Regeneration from Clean Noisecited by 43
- 2025Mask Image Watermarkingcited by 9
- 2024SWIFT: Semantic Watermarking for Image Forgery Thwartingcited by 8
Built on by
Citing papers per year: 2026: 3.
3 papers.