  The unconditional security of a quantum key distribution protocol is often
defined in terms of the accessible information, that is, the maximum mutual
information between the distributed key S and the outcome of an optimal
measurement on the adversary's (quantum) system. We show that, even if this
quantity is small, certain parts of the key S might still be completely
insecure when S is used in applications, such as for one-time pad encryption.
This flaw is due to a locking property of the accessible information: one
additional (physical) bit of information might increase the accessible
information by more than one bit.
