Brent's l2r binary xgcd. not as fast as ours