Forging Tree-Ring: Reproducing and Instrumenting Black-Box Semantic Watermark Forgery

Semantic watermarking schemes such as Tree-Ring hide a detectable pattern in the initial noise latent of a diffusion model. Recent work shows these watermarks are not only removable but forgeable: an attacker who never sees the watermarking key can still produce images the genuine detector accept...