ZK-WAGON: Imperceptible Watermark for Image Generation Models using ZK-SNARKs
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
As image generation models grow increasingly powerful and accessible, concerns around authenticity, ownership, and misuse of synthetic media have become critical. The ability to generate lifelike images indistinguishable from real ones introduces risks such as misinformation, deepfakes, and intellectual property violations. Traditional watermarking methods either degrade image quality, are easily removed, or require access to confidential model internals - making them unsuitable for secure and scalable deployment. We are the first to introduce ZK-WAGON, a novel system for watermarking image generation models using the Zero-Knowledge Succinct Non Interactive Argument of Knowledge (ZK-SNARKs). Our approach enables verifiable proof of origin without exposing model weights, generation prompts, or any sensitive internal information. We propose Selective Layer ZK-Circuit Creation (SL-ZKCC), a method to selectively convert key layers of an image generation model into a circuit, reducing proof generation time significantly. Generated ZK-SNARK proofs are imperceptibly embedded into a generated image via Least Significant Bit (LSB) steganography. We demonstrate this system on both GAN and Diffusion models, providing a secure, model-agnostic pipeline for trustworthy AI image generation.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 6 of its 18 references that are in the map. First posted on arXiv 2 Oct 2025.
Builds on
6 of 18 references.
Closest ancestors · 2
Same direction, newest first
- 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
- 2023ZKROWNN: Zero Knowledge Right of Ownership for Neural Networks13 Sep
Other references · 4
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
- 2020TinyGAN: Distilling BigGAN for Conditional Image Generationcited by 14
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2024An Undetectable Watermark for Generative Image Models
- 2026Secure Seed-Based Multi-bit Watermarking for Diffusion Models from First Principles
- 2025SEAL: Semantic Aware Image Watermarking
- 2025Training-Free Watermarking for Autoregressive Image Generation
- 2025Spread them Apart: Towards Robust Watermarking of Generated Content
- 2024WMAdapter: Adding WaterMark Control to Latent Diffusion Models
- 2025NoisePrints: Distortion-Free Watermarks for Authorship in Private Diffusion Models
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models