Pith. sign in

REVIEW 4 cited by

Publicly-Detectable Watermarking for Language Models

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2310.18491 v4 pith:OBT6XKU5 submitted 2023-10-27 cs.LG cs.CLcs.CR

classification cs.LGcs.CLcs.CR
keywords watermarkingoutputpublicly-detectableschemeaccessalgorithmanyonebarrier
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

We present a publicly-detectable watermarking scheme for LMs: the detection algorithm contains no secret information, and it is executable by anyone. We embed a publicly-verifiable cryptographic signature into LM output using rejection sampling and prove that this produces unforgeable and distortion-free (i.e., undetectable without access to the public key) text output. We make use of error-correction to overcome periods of low entropy, a barrier for all prior watermarking schemes. We implement our scheme and find that our formal claims are met in practice.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 4 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm

    cs.CR 2025-09 conditional novelty 7.0 of 10

    A trigger-tag watermark embedded by fine-tuning lets modified LLMs mark their own phishing outputs for cheap detection.

  2. GaussMark: A Practical Approach for Structural Watermarking of Language Models

    cs.CR 2025-01 conditional novelty 7.0 of 10

    GaussMark embeds a detectable watermark by adding per-generation Gaussian noise to one weight matrix and detecting gradient alignment with that noise.

  3. SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness

    cs.CR 2026-05 unverdicted novelty 6.5 of 10

    SAMark uses self-anchored semantic green regions, multi-channel hyperbolic scoring, and diversity-aware filtering to reach 90.2% TP@FP1% detection under paragraph paraphrasing while preserving text quality.

  4. A Survey of LLM $\times$ DATA

    cs.DB 2025-05 conditional novelty 5.0 of 10

    A comprehensive survey of the bidirectional links between LLMs and data management, organized as DATA4LLM and LLM4DATA with a new 'IaaS' data-quality framework.

Pith tools