Rev. Mod. Phys. **84**, 621 (2012).

S.L. Braunstein and S. Pirandola, Phys. Rev. Lett. **108**, 130502 (2012).

Variables can be discrete or continuous. In the latter case, sums become integrals and probability distributions become densities.

I. Devetak and A. Winter, IEEE Trans. Inform. Theory. **50**, 3183 (2004).

B. Schumacher and M.A. Nielsen, Phys. Rev. A **54**, 2629 (1996).

S. Lloyd, Phys. Rev. A **55**, 1613 (1997).

M. Koashi and A. Winter, Phys. Rev. A **69**, 022309 (2004).

R. Renner, Nature Phys. **3**, 645 (2007).

R. Renner, and J.I. Cirac, Phys. Rev. Lett. **102**, 110504 (2009).

Up to isometries which do not increase Eve’s information.

Note that we can always add another ancilla $E^{\prime}$ to make the output $\Psi_{ABEE^{\prime}P}$ globally pure.

This reasoning can easily be extended to consider coherent detections for Eve and Alice.

C.H. Bennett, Phys. Rev. Lett. **68**, 3121-3124 (1992).

Note that, for $A$,$B$ quantum systems and $X,Y$ classical variables, we use $I(X,Y)$ for the classical mutual information, $%
I(A,B)$ for the quantum mutual information, and $I(A,X)$ for the Holevo information.

I. Devetak and A. Winter, Phys. Rev. Lett. **93**, 080501 (2004).

I. Devetak and A. Winter, Proc. R. Soc. Lond. A **461**, 207-235 (2005).

In general, the 