Flip, Don't Shuffle: Watermarking LLMs at the Speed of Inference

September 03, 2026 ยท Grace Period ยท ๐Ÿ› EMNLP 2026 Main Conference

โณ Grace Period
This paper is less than 90 days old. We give authors time to release their code before passing judgment.
Authors Simone Ceppi, Ignacio Sanchez arXiv ID 2609.03844 Category cs.CR: Cryptography & Security Cross-listed cs.CL, cs.LG Citations 0 Venue EMNLP 2026 Main Conference
Abstract
We introduce Stateless Bernoulli Watermarking (SBW), a new statistical watermark for Large Language Models that determines green list membership through independent per-token Bernoulli trials. Unlike KGW's vocabulary permutation or SynthID's multi-layer tournament, SBW requires only a single comparison per token against a counter-based random number generator, reducing membership complexity to $O(1)$ and enabling single-kernel execution with zero intermediate allocations. We prove that this formulation preserves the same detection guarantees as fixed-size green lists: the z-score test remains $\mathcal{N}(0,1)$ under the null. The stateless architecture enables capabilities unavailable to existing methods: full-vocabulary self-salt watermarking (over 6000$\times$ faster than KGW's self-salt and 2$\times$ faster than SynthID despite biasing the entire vocabulary with candidate-dependent seeding) and architectural compatibility with distributed inference. In end-to-end generation benchmarks, SBW adds less than 1\% overhead at all batch sizes. We additionally identify hash function design as a previously unexplored axis for watermark quality, showing that a GPU-native Jenkins hash improves null calibration by 1.8$\times$ while producing more diverse text. Experiments across two seeding schemes and eight $(ฮณ, ฮด)$ configurations confirm statistical equivalence with ROC-AUC differences below 0.01.
Community shame:
Not yet rated
Community Contributions

Found the code? Know the venue? Think something is wrong? Let us know!

๐Ÿ“œ Similar Papers

In the same crypt โ€” Cryptography & Security