Daniele Venturi

Watermarks in the Sand: Impossibility of Strong Watermarking for Language Models

Watermarking generative models consists of planting a statistical signal (watermark) in a model's output so that it can be later verified that the output was generated by the given model. A strong watermarking scheme satisfies the property that a computationally bounded attacker cannot erase the wat…