# WaveMark

Provenance watermarks for diffusion-generated images were previously suppressed by removal attacks with little visible quality loss. WaveMark embeds the message in the initial noise's wavelet domain, using a key to spread replicas of each message bit across spatial positions, wavelet orientations, and scales, then encodes each bit in a carrier's projection magnitude. On SD2.1 it reaches 100.0% bit accuracy without attacks and retains 88.66% and 88.06% under MarkNull and MarkNull-A, above the compared baselines.

Provenance watermarks for diffusion-generated images were previously suppressed by removal attacks with little visible quality loss. WaveMark embeds the message in the initial noise's wavelet domain, using a key to spread replicas of each message bit across spatial positions, wavelet orientations, and scales, then encodes each bit in a carrier's projection magnitude. On SD2.1 it reaches 100.0% bit accuracy without attacks and retains 88.66% and 88.06% under MarkNull and MarkNull-A, above the compared baselines.