We develop an information-theoretic formalism to describe a quantum-cryptographically protected communication channel. We thereby establish the fundamental limits on the security of the channel. This formalism enables us to propose protocols that allow detection of an eavesdropper by examination of data that would normally be discarded.

• Received 13 October 1992

DOI:https://doi.org/10.1103/PhysRevA.48.R5