Statistics for Detection Efficiency Mismatch and Finite-Key-Size Attacks on Practical Quantum Cryptography Systems