mlsanityData to 7 Oct 2026

MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking

arXiv 2601.22246 ↗First posted 29 Jan 2026cs.CR cs.AIcited by 1

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

As large language models (LLMs) become integral to applications such as question answering and content creation, reliable content attribution has become increasingly important. Watermarking is a promising approach, but most existing methods either provide only binary signals or achieve multi-bit embedding by distorting the generation distribution. We propose MirrorMark, a generalizable mapping-centric approach for multi-bit LLM watermarking. MirrorMark separates the symbol mapping rule from the base watermarking sampler and maps each symbol to a mod-1 mirroring transformation of a detector-reproducible pseudorandom object, such as sampling values or permutation ranks. A binary-tokenizer analysis shows that complementary mappings yield larger matched--mismatched score gaps than independent-key or shift-based mappings. When composed with a distortion-free base sampler, MirrorMark preserves the token probability distribution by design and maintains text quality in practice. To support practical payload embedding, we introduce a Context-Anchored Balanced Scheduler (CABS), which balances token assignments across message positions while localizing edit effects. We further provide theoretical EER analyses for two representative sampler instantiations. Experiments show that MirrorMark achieves strong detectability and bit accuracy while maintaining text quality comparable to non-watermarked generation.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 22 of its 39 references that are in the map. First posted on arXiv 29 Jan 2026.

Builds on

22 of 39 references.

Closest ancestors · 15

Same direction, newest first

  1. 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models5 Jun
  2. 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach3 Oct
  3. 2024Watermark Stealing in Large Language Models29 Feb
  4. 2024Multi-Bit Distortion-Free Watermarking for Large Language Models26 Feb
  5. 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb
  6. 2023Unbiased Watermark for Large Language Models22 Sep
  7. 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
  8. 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
  9. 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
  10. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  11. 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
  12. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
3 more
  1. 2023On the Reliability of Watermarks for Large Language Models7 Jun
  2. 2023Undetectable Watermarks for Language Models25 May
  3. 2023A Watermark for Large Language Models24 Jan

Other references · 7

  1. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  3. 2021Program Synthesis with Large Language Modelscited by 3,509
  4. 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,100
  5. 2019ELI5: Long Form Question Answeringcited by 567
  6. 2021XL-Sum: Large-Scale Multilingual Abstractive Summarization for 44 Languagescited by 346
  7. 2024Excuse me, sir? Your language model is leaking (information)cited by 11

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.