Hang Yang PHD · UMASS

Imagehide demo

Live demo of the MWIP (Minimal Whole-Image Provenance) INN watermark. Upload a photo; the model embeds an 896-bit payload (perceptual hash + Ed25519 signature + public key), then we run the container through 11 channel attacks and measure how the bits survive.

Demo keypair ships in the page; anyone can forge a valid signature. Real deployment uses device-bound secret keys. The pHash used for H is a placeholder — production MWIP will standardize on a different robust hash.

Drop an image or pick a file to begin.

cover
container (watermarked)
residual ×10
One-shot stats will appear here after encoding.
Attacks:
Attack PSNR SSIM Bit acc Sig

Out of scope for this model: crop, rotate, Gaussian noise, Gaussian blur. The MWIP encoder targets the canonical-delivery scope (JPEG + benign down-up resize).