Bézout's identity: ax+by=gcd(a,b)