SimpleMark: Fast Multi-Bit Text Watermarking under f-Divergence Constraints
cs.CR, cs.AI, cs.IT, math.IT
Submitted: 2026-10-05
Updated: 2026-10-05
Comments: 39 pages, 10 figures
License: http://creativecommons.org/licenses/by/4.0/
The gist: We introduce a framework for multi-bit text watermarking with security defined directly through f-divergence from the base language model distribution.
Abstract
We introduce a framework for multi-bit text watermarking with security defined directly through f-divergence from the base language model distribution. Unlike prior approaches that focus on average-key distortion-freeness or a particular statistical distance, our formulation supports general f-divergences, including total variation and KL divergence, and enforces the guarantee for each realized key and embedded message. We develop a coding-based watermarking scheme that optimally biases next-token distributions subject to a prescribed divergence budget, and characterize the resulting tradeoff between embedding rate, decoding reliability, and statistical security. Experimentally, we compare our method against prior multi-bit watermarking schemes across modern language models and payload regimes. Our approach achieves substantially lower watermark detectability while maintaining competitive message-recovery performance and generation quality. Our results provide a unified view of secure multi-bit watermarking and recover several commonly used security notions as special cases.
Sources
- Training Verifiers to Solve Math Word Problems
- The Llama 3 Herd of Models
- ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport
- MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking
- GPQA: A Graduate-Level Google-Proof Q&A Benchmark
- XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills
- Token Composition: A Graph Based on EVM Logs