cs.CLSep 13, 2026

DenMark: Robust Semantic Watermarking for Diffusion Language Models

Authors: Tianhao Ma, Weihao Xuan, Dong-Dong Wu, Farshid Nooshi, Takashi Ishida, Gang Niu, Naoto Yokoya, Masashi Sugiyama

Organizations: The University of Tokyo · RIKEN Center for Advanced Intelligence Project

Abstract

Semantic text watermarks encode signals in meaning rather than surface token choices, offering robustness to paraphrasing and other semantic-preserving edits. Existing semantic watermarking methods are primarily designed for autoregressive language models (ARLMs), where completed candidate units can be generated and scored before generation proceeds. This paradigm does not naturally extend to diffusion language models (DLMs), where semantic units remain incomplete during intermediate denoising steps and tokens may be updated in flexible orders. We propose DenMark, a semantic watermarking framework that injects key-dependent signals directly into the DLM denoising process. DenMark partitions the output into fixed token regions and uses temporary rollouts as semantic lookahead: conditional completions estimate the eventual semantics of an incomplete region, enabling DenMark to select local updates with higher estimated semantic watermark scores. Repeating this procedure across denoising steps progressively accumulates watermark evidence in the final output. For detection, DenMark uses calibrated scanning over candidate unit sizes to remain robust to boundary shifts introduced by semantic attacks. Across four DLMs, three datasets, and four semantic attacks, DenMark gives the strongest overall robustness and achieves the best TPR at each reported operating point in 46 of the 48 backbone-dataset-attack combinations. Overall, DenMark provides an effective semantic watermark for DLMs. Code is available at https://github.com/TianhaoMa5/DenoMark.

Figures & tables

Appendix figures & tables23 assets

Supplementary material from the paper’s appendix.

Appendix

Explore similar work

CardsList
  1. Watermarking Diffusion Language Models

    Sep 29, 2025Thibaud Gloaguen, Robin Staab, Nikola Jovanović +1Diffusion Model WatermarkingLLM Watermarking

  2. Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings

    Jun 30, 2026Jonas Schäfer, Cezary Pilaszewicz, Gerhard WunderText WatermarkingLLM Watermarking

  3. Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks

    May 6, 2026Mohd Ruhul Ameen, Akif Islam, Nadim Mahmud +1Diffusion Model WatermarkingWatermark Removal