mlsanityData to 14 Oct 2026

CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking

arXiv 2606.24163 ↗First posted 23 Jun 2026cs.CR cs.CLcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Reliable provenance for LLM outputs requires multi-bit watermarks that remain robust under editing while maintaining low false-positive rates. Existing ECC-based LLM watermarks rely on hard-decision decoding, discarding token-level reliability information and limiting robustness under post-generation edits. We propose CORE-BREW, a COnstant-hit-Rate Embedding extension of BREW for multi-bit watermarking. CORE-BREW calibrates the watermark channel by targeting a fixed hit rate p^star, yielding closed-form per-token log-likelihood ratios (LLRs) for soft-decision decoding. It incorporates entropy-aware erasures to limit perturbations in low-entropy contexts and combines likelihood-based scoring with soft-decision list decoding to exploit soft evidence. Experiments on open-source LLMs under token-level edits and paraphrasing demonstrate that CORE-BREW generally improves detection robustness and payload recovery over the BREW baseline while maintaining low observed false-positive rates. Despite higher conditional perplexity, BLEU and BERTScore remain close to those of unwatermarked text, indicating comparable reference-based translation quality.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 19 of its 32 references that are in the map. First posted on arXiv 23 Jun 2026.

Builds on

19 of 32 references.

Closest ancestors · 11

Same direction, newest first

  1. 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking1 May
  2. 2024Watermarking Language Models with Error Correcting Codes12 Jun
  3. 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
  4. 2024Pseudorandom Error-Correcting Codes14 Feb
  5. 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
  6. 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models11 Oct
  7. 2023Necessary and Sufficient Watermark for Large Language Models2 Oct
  8. 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
  9. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  10. 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
  11. 2023A Watermark for Large Language Models24 Jan

Other references · 8

  1. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
  2. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  3. 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
  4. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
  5. 2019The Curious Case of Neural Text Degenerationcited by 2,916
  6. 2018SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processingcited by 1,989
  7. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
  8. 2020Attacking Neural Text Detectorscited by 39

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026WorldCup Sampling for Multi-bit LLM Watermarking
  2. 2026CertMark: Distortion-Free Multi-Bit Watermarking with Certified Decoding
  3. 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions
  4. 2026WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading
  5. 2024Robust Multi-bit Text Watermark with LLM-based Paraphrasers
  6. 2026RMCW: A Deletion-Robust Watermark Based on Reed--Muller Codes for Language Models
  7. 2026MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking
  8. 2026QuantileMark: A Message-Symmetric Multi-bit Watermark for LLMs