The Internet Computer for Geeks

Authors Dieter, Jan; Groth, Jens; Moran, Tomer; et al. (DFINITY Foundation)
Year 2022
Project Internet Computer (ICP)
License Apache 2.0
Official Source https://eprint.iacr.org/2022/087

This page is an educational summary and analysis of an official whitepaper or technical paper, written for reference purposes. It is not a verbatim reproduction. CryptoGloss does not claim authorship of the original work. All intellectual property rights remain with the original author(s). The official document is linked above.

“The Internet Computer for Geeks” is the 2022 formal technical paper by the DFINITY Foundation describing the Internet Computer Protocol (ICP) — a blockchain designed by cryptographer Dominic Williams and the DFINITY team with ambitions to become a decentralized world computer capable of hosting full-stack web applications entirely on-chain, replacing cloud computing providers.

The paper’s three central contributions are: Chain Key Cryptography (a threshold BLS signature scheme enabling each subnet to produce a single compact public key for global verification), the Network Nervous System (NNS) for algorithmic on-chain governance, and a canister (smart contract) execution model using WebAssembly with an unusual reverse gas model.

> Paper: Available at eprint.iacr.org/2022/087.


Publication and Context

DFINITY was founded in 2016 (before Ethereum mainnet) with the ambitious claim of building decentralized cloud computing to replace AWS, Google Cloud, and Facebook. After years of private development and a $102M token sale, ICP launched mainnet in May 2021 — simultaneously listing on Coinbase at a $45 billion valuation and sparking immediate controversy when the token price declined >90% within weeks.

The 2022 IACR paper formalized the cryptographic design that had been described in scattered documents and blog posts.


Subnet Architecture

The Internet Computer is divided into subnets — smaller groups of ~13–40 nodes that each run a separate instance of the consensus protocol. Each subnet is a separate blockchain with its own state:

  • Multiple subnets run in parallel, each hosting different canisters
  • Subnets communicate via cross-subnet messaging using Chain Key Cryptography
  • New subnets can be added by NNS governance, increasing total capacity
  • Each subnet node stores the full state of that subnet (not global state)

Node provider model: Physical nodes are operated by independent data centers approved by NNS governance; nodes are geographically distributed but data-center-grade (not home hardware).


Chain Key Cryptography

The signature breakthrough enabling ICP’s subnet model:

Threshold BLS signatures: Each subnet has a single public key (a BLS key shared among all subnet nodes using a threshold secret sharing scheme). A threshold (2/3+) of subnet nodes must contribute partial signatures to produce a valid subnet signature. Anyone external can verify a subnet’s output with just the single public key.

Consequence: When a canister on Subnet A calls a canister on Subnet B:

  • Subnet A signs the cross-subnet message with its collective threshold BLS signature
  • Subnet B verifies it using Subnet A’s public key (publicly known and registered in the NNS)
  • No complex IBC-style relay or bridge logic is required

This is architecturally very different from cross-chain bridges, which require contract-level proof verification rather than simple signature checks.


Canisters and Reverse Gas

Canisters are the ICP equivalent of smart contracts — WebAssembly programs with persistent state called stable memory:

  • Canisters are owned and maintained by their developers, not end users
  • Cycles (ICP’s gas equivalent) are charged to the canister, not the caller
  • Developers must “charge” their canisters with Cycles by burning ICP tokens
  • End users call canisters for free — from the user’s perspective, there are no gas fees

This reverse gas model enables web-browser-style user experience: a user accesses an ICP-hosted web app (served from a canister), interacts with it, and pays nothing — just like visiting a website. The dApp developer pays for compute.

Limitations: Developers who undercharge their canisters will run out of Cycles and go dark. Malicious users can drain canisters with free calls (DoS).


Network Nervous System (NNS)

The NNS is an on-chain governance DAO that controls the entire Internet Computer:

  • ICP holders lock tokens as voting neurons and vote on proposals
  • Proposals can add/remove subnet nodes, upgrade the protocol, set system parameters, mint/burn ICP
  • Neurons follow other neurons (liquid democracy / “neuron following”) — most holders follow well-known experts

Critical observation: The NNS having control over subnet node membership means the NNS can remove any node from any subnet. This gives the NNS (and effectively DFINITY, which held dominant voting power at launch) significant centralized control over the network.


Reality Check

ICP’s technical ambitions are extraordinary — truly hosting web applications on-chain is a novel and compelling idea. In practice:

  • Centralization concerns: DFINITY controlled the majority of NNS voting weight at launch, making the “decentralized governance” claim misleading. The team has worked to dilute this over time.
  • Token launch controversy: The $45B valuation on day 1 with >90% price crash within months was widely viewed as a poorly managed token distribution, damaging user trust.
  • Performance vs. claims: ICP subnets target ~250 TPS per subnet with ~2 second finality; this is real but not world-computer-scale.
  • WebAssembly ecosystem: While WASM is a standard, ICP’s canister-specific storage model (stable memory, orthogonal persistence) requires ICP-specific tooling, limiting developer portability.
  • Adoption: Despite years of development and massive investment, ICP has not achieved significant DeFi, NFT, or web application adoption relative to its resources.

Legacy

ICP’s Chain Key Cryptography is a genuine cryptographic contribution — threshold BLS for subnet-level single-key verification is an elegant design. The reverse gas model influenced thinking about blockchain UX for consumer applications. The system’s ambitious scope (world computer replacing cloud) makes it one of the more intellectually interesting blockchain designs even if execution has fallen short.


Related Terms


Research

  • Dieter, J., Groth, J., Moran, T., et al. (2022). The Internet Computer for Geeks. IACR ePrint 2022/087.

— Primary formal paper. Section 4 specifies Chain Key Cryptography; Section 6 covers the NNS governance model.

  • Hanke, T., Movahedi, M., & Williams, D. (2018). DFINITY Technology Overview Series, Consensus System. DFINITY Technical Report.

— Earlier DFINITY paper describing the Threshold Relay consensus system (predecessor to the 2022 protocol).

  • Boldyreva, A. (2003). Threshold Signatures, Multisignatures and Blind Signatures Based on the Gap-Diffie-Hellman-Group Signature Scheme. PKC 2003.

— Foundational threshold BLS signature scheme; the cryptographic basis for ICP’s Chain Key Cryptography.