The US National Security Agency (NSA) arranged a secret $10 million (£6.1 million, AU$11.2 million) contract with security company RSA to embed flaws in its encryption software.