English

Optimized Couplings for Watermarking Large Language Models

Cryptography and Security 2025-05-15 v1 Artificial Intelligence Information Theory math.IT

Abstract

Large-language models (LLMs) are now able to produce text that is, in many cases, seemingly indistinguishable from human-generated content. This has fueled the development of watermarks that imprint a ``signal'' in LLM-generated text with minimal perturbation of an LLM's output. This paper provides an analysis of text watermarking in a one-shot setting. Through the lens of hypothesis testing with side information, we formulate and analyze the fundamental trade-off between watermark detection power and distortion in generated textual quality. We argue that a key component in watermark design is generating a coupling between the side information shared with the watermark detector and a random partition of the LLM vocabulary. Our analysis identifies the optimal coupling and randomization strategy under the worst-case LLM next-token distribution that satisfies a min-entropy constraint. We provide a closed-form expression of the resulting detection rate under the proposed scheme and quantify the cost in a max-min sense. Finally, we provide an array of numerical results, comparing the proposed scheme with the theoretical optimum and existing schemes, in both synthetic data and LLM watermarking. Our code is available at https://github.com/Carol-Long/CC_Watermark

Keywords

Cite

@article{arxiv.2505.08878,
  title  = {Optimized Couplings for Watermarking Large Language Models},
  author = {Dor Tsur and Carol Xuan Long and Claudio Mayrink Verdun and Hsiang Hsu and Haim Permuter and Flavio P. Calmon},
  journal= {arXiv preprint arXiv:2505.08878},
  year   = {2025}
}

Comments

Accepted at ISIT25

R2 v1 2026-06-28T23:32:06.586Z