English

Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking

Cryptography and Security 2026-05-04 v1 Computation and Language

Abstract

Recent multi-bit watermarking methods for large language models (LLMs) prioritize capacity over reliability, often conflating decoding with detection. Our analysis reveals that existing ECC-based extractors suffer from catastrophic false positive rates (FPR), and applying rejection thresholds merely collapses detection sensitivity (TPR) to random guessing. To resolve this structural limitation, we propose \textbf{BREW} (Block-wise Reliable Embedding for Watermarking), a framework shifting the paradigm to \emph{designated verification}. BREW employs a two-stage mechanism: (i) \textbf{blind message estimation} via independent block voting, followed by (ii) \textbf{window-shifting verification} that rigorously validates the payload against local edits. Experiments demonstrate that BREW achieves a TPR of 0.965 with an FPR of 0.02 under 10\% synonym substitution, demonstrating that the high-FPR issue is not an inherent trade-off of multi-bit watermarking, but a solvable structural flaw of prior decoding-centric designs. Our framework is model-agnostic and theoretically grounded, providing a scalable solution for reliable forensic deployment.

Keywords

Cite

@article{arxiv.2605.00348,
  title  = {Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking},
  author = {Joeun Kim and HoEun Kim and Dongsup Jin and Young-Sik Kim},
  journal= {arXiv preprint arXiv:2605.00348},
  year   = {2026}
}
R2 v1 2026-07-01T12:44:42.645Z