Optimal Eavesdropping in Quantum Cryptography