Fundamental Limits on Information Security and Privacy