Email Record: Tight security bounds for decoy-state quantum key distribution