Skip to content

WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading

Sep 2026 · 0 citations · 34 references
Computer Science

TL;DR

WeaveMark, a robust and scalable multi-bit LLM watermarking scheme based on coded payload spreading, improves payload capacity through multi-bit-per-token spreading (weaving), improving extraction accuracy through soft-decision error-correcting codes, and preserving text quality through unbiased multilayer reweighting.

Abstract

Multi-bit watermarking for large language models enables content source tracing by embedding user-identifiable messages into generated text. Existing methods face a fundamental trade-off among extraction accuracy, text quality, and payload capacity. We propose WeaveMark, a robust and scalable multi-bit LLM watermarking scheme based on coded payload spreading. WeaveMark shifts this trade-off frontier by improving payload capacity through multi-bit-per-token spreading (weaving), improving extraction accuracy through soft-decision error-correcting codes, and preserving text quality through unbiased multilayer reweighting. It further introduces dedicated zero-bit layers for reliable watermark presence detection. Extensive experiments demonstrate substantial gains in extraction performance, especially for long messages and edited text, without degrading text quality. WeaveMark achieves an 89.8% match rate for 32-bit messages at 200 tokens, compared with 20.8% for BiMark. Under 10% substitution attacks on 16-bit messages at 200 tokens, it maintains 86.0% versus 30.7%. Code is available at https://anonymous.4open.science/r/WeaveMark-ED6F.

View source

Similar papers

#natural language process... Preprint Sep 2026

CertMark: Distortion-Free Multi-Bit Watermarking with Certified Decoding

Leading multi-bit watermarking methods for language models encode messages by biasing the model's next-token probabilities, creating a trade-off between message recovery and text quality. Their decoders typically return the highest-scoring candidate from accumulated token-level evidence, without a certified abstention...

Pawel Batorski, P. Spurek, Paul Swoboda · 0 citations
Preprint Aug 2026

Combining Self-Embedding Audio Watermarking with Ultra-Low-Bitrate Neural Codecs

Experiments across four controlled manipulation types under ideal channel conditions show that the embedded payload, and hence an approximate reconstruction of the authentic content, is always fully recovered without bit errors, and the results indicate that the choice of neural codec is the dominant factor for detecti...

Yigitcan Özer, Xin Wang, Zhe Zhang et al. · 0 citations
#natural language process... Preprint Sep 2026

Anchor-ECC: Local Integrity Checking for Watermarked LLM Outputs via Error-Correcting Codes

LLM watermarking has become an effective approach to distinguishing AI-generated text from human-written text by embedding detectable patterns during generation. However, a small post-generation edit may change the meaning of the text without removing its overall watermark signal, creating a risk that the modified cont...

Ze-Wei Deng, M. Siddeek, Li-Yan Xie et al. · 0 citations
#natural language process... Preprint Sep 2026

TTMark: Pairwise Distortion-Free Watermarking Beyond Single-Token Entropy

Tandem Token WaterMark (TTMARK), a general pairwise watermarking framework that extends distortion-free watermarking from individual tokens to adjacent token pairs, and introduces a branch-isolating concatenated tandem generation algorithm that efficiently constructs the joint distribution in a single forward pass.

Rui-Bo Chen, Zheng-Mian Hu, Dong-Hang Lu et al. · 0 citations
#artificial intelligence Preprint Aug 2026

OpenStamp: A Watermark for Open-Source Language Models

This work introduces OpenStamp, a watermarking technique that encodes the watermarking logic directly into the model weights by modifying only the final projection, or unembedding, layer, and shows that OpenStamp achieves superior detection performance, with minimal degradation in model capabilities compared to prior m...

Miroojin Bakshi, Saksham Rastogi, Danish Pruthi · 0 citations
Preprint Aug 2026

Bit-Level Triangular Content-Aware Permutation for Fragile Image Watermarking: Zero False Positive Rate, Single-Bit Sensitivity, and Arbitrary Dimension Support

With the growth of digital document exchange, protecting image integrity against attacks such as Vector Quantization (VQ) and collage has become critical. Existing methods are vulnerable to these attacks and limited to fixed image dimensions. This paper presents a novel, dimension-agnostic, fragile watermarking algorit...

Zahra Ghoraeian, M. Sadeghi, Samaneh Mashhadi · 0 citations

Related blog posts

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.