mlsanityData to 14 Oct 2026

Kolmogorov Complexity Bounds for LLM Steganography and a Perplexity-Based Detection Proxy

arXiv 2603.21567 ↗First posted 23 Mar 2026cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

Large language models can rewrite text to embed hidden payloads while preserving surface-level meaning, a capability that opens covert channels between cooperating AI systems and poses challenges for alignment monitoring. We study the information-theoretic cost of such embedding. Our main result is that any steganographic scheme that preserves the semantic load of a covertext~M1 while encoding a payload~P into a stegotext~M2 must satisfy K(M2) ≥ K(M1) + K(P) - O(log n), where K denotes Kolmogorov complexity and n is the combined message length. A corollary is that any non-trivial payload forces a strict complexity increase in the stegotext, regardless of how cleverly the encoder distributes the signal. Because Kolmogorov complexity is uncomputable, we ask whether practical proxies can detect this predicted increase. Drawing on the classical correspondence between lossless compression and Kolmogorov complexity, we argue that language-model perplexity occupies an analogous role in the probabilistic regime and propose the Binoculars perplexity-ratio score as one such proxy. Preliminary experiments with a color-based LLM steganographic scheme support the theoretical prediction: a paired t-test over 300 samples yields t = 5.11, p < 10-6.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 1 of its 12 references that are in the map. First posted on arXiv 23 Mar 2026.

Builds on

1 of 12 references.

References · 1

  1. 2023Preventing Language Models From Hiding Their Reasoningcited by 65

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.