Mathematics Stack Exchange is a question and answer site for people studying math at any level and professionals in related fields. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to find a set of integer solutions of Diophantine equation: $ax + by = c$, and apparently $\gcd(a,b)|c$. Then by what formula can I use to find $x$ and $y$ ?

I tried to play around with it:
$x = (c - by)/a$, hence $a|(c - by)$.

$a$, $c$ and $b$ are known. So to obtain integer solution for $a$, then $c - by = ak$, and I lost from here, because $y = (c - ak)/b$. I kept repeating this routine and could not find a way to get rid of it? Any hint?


share|cite|improve this question
Your condition is flipped; it's $\gcd(a,b)|c$, not the other way around. – Arturo Magidin Feb 6 '11 at 21:04
@Arturo Magidin: Thanks, edited. – Chan Feb 6 '11 at 21:37
up vote 63 down vote accepted

The diophantine equation $ax+by = c$ has solutions if and only if $\gcd(a,b)|c$. If so, it has infinitely many solutions, and any one solution can be used to generate all the other ones.

To see this, note that the greatest common divisor of $a$ and $b$ divides both $ax$ and $by$, hence divides $c$ if there is a solution. This gives the necessity of the condition (which you have backwards). (fixed in edits)

The converse is actually a constructive proof, that you can find in pretty much every elementary number theory course or book, and which is essentially the same as yunone's answer above (but without dividing through first).

From the Extended Euclidean Algorithm, given any integers $a$ and $b$ you can find integers $s$ and $t$ such that $as+bt = \gcd(a,b)$; the numbers $s$ and $t$ are not unique, but you only need one pair. Once you find $s$ and $t$, since we are assuming that $\gcd(a,b)$ divides $c$, there exists an integer $k$ such that $\gcd(a,b)k = c$. Multiplying $as+bt=\gcd(a,b)$ through by $k$ you get $$a(sk) + b(tk) = \gcd(a,b)k = c.$$

So this gives one solution, with $x=sk$ and $y=tk$.

Now suppose that $ax_1 + by_1 = c$ is a solution, and $ax+by=c$ is some other solution. Taking the difference between the two, we get $$a(x_1-x) + b(y_1-y) = 0.$$ Therefore, $a(x_1-x) = b(y-y_1)$. That means that $a$ divides $b(y-y_1)$, and therefore $\frac{a}{\gcd(a,b)}$ divides $y-y_1$. Therefore, $y = y_1 + r\frac{a}{\gcd(a,b)}$ for some integer $r$. Substituting into the equation $a(x_1-x) = b(y-y_1)$ gives $$a(x_1 - x) = rb\left(\frac{a}{\gcd(a,b)}\right)$$ which yields $$\gcd(a,b)a(x_1-x) = rba$$ or $x = x_1 - r\frac{b}{\gcd(a,b)}$.

Thus, if $ax_1+by_1 = c$ is any solution, then all solutions are of the form $$x = x_1 - r\frac{b}{\gcd(a,b)},\qquad y = y_1 + r\frac{a}{\gcd(a,b)}$$ exactly as yunone said.

To give you an example of this in action, suppose we want to find all integer solutions to $$258x + 147y = 369.$$

First, we use the Euclidean Algorithm to find $\gcd(147,258)$; the parenthetical equation on the far right is how we will use this equality after we are done with the computation. \begin{align*} 258 &= 147(1) + 111 &\quad&\mbox{(equivalently, $111=258 - 147$)}\\ 147 &= 111(1) + 36&&\mbox{(equivalently, $36 = 147 - 111$)}\\ 111 &= 36(3) + 3&&\mbox{(equivalently, $3 = 111-3(36)$)}\\ 36 &= 3(12). \end{align*} So $\gcd(147,258)=3$. Since $3|369$, the equation has integral solutions.

Then we find a way of writing $3$ as a linear combination of $147$ and $258$, using the Euclidean algorithm computation above, and the equalities on the far right. We have: \begin{align*} 3 &= 111 - 3(36)\\ &= 111 - 3(147 - 111) = 4(111) - 3(147)\\ &= 4(258 - 147) - 3(147)\\ &= 4(258) -7(147). \end{align*} Then, we take $258(4) + 147(-7)=3$, and multiply through by $123$; why $123$? Because $3\times 123 = 369$. We get: $$258(492) + 147(-861) = 369.$$ So one solution is $x=492$ and $y=-861$. All other solutions will have the form \begin{align*} x &= 492 - \frac{147r}{3} = 492 - 49r,\\ y &= -861 + \frac{258r}{3} =86r - 861, &\qquad&r\in\mathbb{Z}. \end{align*} You can reduce those constants by making a simple change of variable. For example, if we let $r=t+10$, then \begin{align*} x &= 492 - 49(t+10) = 2 - 49t,\\ y &= 86(t+10) - 861 = 86t - 1,&\qquad&t\in\mathbb{Z}. \end{align*}

share|cite|improve this answer
+1, puts my answer to shame! – yunone Feb 6 '11 at 20:56
All I have to say is AMAZING ANSWER ^_^! – Chan Feb 6 '11 at 21:40
I think there was a typo on the line: $x = 592 - \frac{147r}{3} = 492 - 49r$. I believe it should be $492$ on the left hand side. – Chan Feb 28 '11 at 1:02
@Chan: Yes, thank you. – Arturo Magidin Feb 28 '11 at 1:05
I don't mean to bug you all these months later, but I believe there is an extraneous $t$ in the equation for $y$ right before the gray page break line. – yunone Jul 22 '11 at 2:15

As others have mentioned one may employ the extended Euclidean algorithm. It deserves to be better known that this is most easily performed via row-reduction on an augmented matrix - analogous to methods used in linear algebra. See this excerpt from one of my old sci.math posts:

For example, to solve  mx + ny = gcd(x,y) one begins with
two rows  [m   1    0], [n   0    1], representing the two
equations  m = 1m + 0n,  n = 0m + 1n. Then one executes
the Euclidean algorithm on the numbers in the first column,
doing the same operations in parallel on the other columns,

Here is an example:  d =  x(80) + y(62)  proceeds as:

                      in equation form   | in row form
                    80 =   1(80) + 0(62) | 80   1   0
                    62 =   0(80) + 1(62) | 62   0   1
 row1 -   row2  ->  18 =   1(80) - 1(62) | 18   1  -1
 row2 - 3 row3  ->   8 =  -3(80) + 4(62) |  8  -3   4
 row3 - 2 row4  ->   2 =   7(80) - 9(62) |  2   7  -9
 row4 - 4 row5  ->   0 = -31(80) -40(62) |  0 -31  40

Above the row operations are those resulting from applying
the Euclidean algorithm to the numbers in the first column,

        row1 row2 row3 row4 row5
namely:  80,  62,  18,   8,   2  = Euclidean remainder sequence
               |    |
for example   62-3(18) = 8, the 2nd step in Euclidean algorithm

becomes:   row2 -3 row3 = row4  on the identity-augmented matrix.

In effect we have row-reduced the first two rows to the last two.
The matrix effecting the reduction is in the bottom right corner.
It starts as the identity, and is multiplied by each elementary
row operation matrix, hence it accumulates the product of all
the row operations, namely:

       [  7 -9] [ 80  1  0]  =  [2   7  -9]
       [-31 40] [ 62  0  1]     [0 -31  40]

The 1st row is the particular  solution: 2 =   7(80) -  9(62)
The 2nd row is the homogeneous solution: 0 = -31(80) + 40(62),
so the general solution is any linear combination of the two:

       n row1 + m row2  ->  2n = (7n-31m) 80 + (40m-9n) 62

The same row/column reduction techniques tackle arbitrary
systems of linear Diophantine equations. Such techniques
generalize easily to similar coefficient rings possessing a
Euclidean algorithm, e.g. polynomial rings F[x] over a field, 
Gaussian integers Z[i]. There are many analogous interesting
methods, e.g. search on keywords: Hermite / Smith normal form, 
invariant factors, lattice basis reduction, continued fractions,
Farey fractions / mediants, Stern-Brocot tree / diatomic sequence.
share|cite|improve this answer
Thanks, I really like your Linear Algebra approach. – Chan Feb 6 '11 at 21:54
@Chan: It irks me that most textbooks in elementary number theory present more obfuscated approaches. If you go on to study algebra you will learn more about the underlying theory when you study Hermite Smith normal forms and other module-theoretic generalizations of linear algebra results. – Bill Dubuque Feb 6 '11 at 22:06
This is actually discussed in Niven, Zuckerman, Montgomery. Just so you have a reference (pages 217-218 in the 5th edition). – Arturo Magidin Feb 6 '11 at 22:07
@Arturo. Thanks for the reference. I'm happy to see that it finally made it into an edition of a popular textbook, but I'm sad that the presentation there leaves much to be desired. – Bill Dubuque Feb 6 '11 at 22:21

Do you mean $\gcd(a,b)$ divides $c$? If so, you can divide both sides of the equation to get $$ \frac{a}{g}x+\frac{b}{g}y=\frac{c}{g} $$ where $g=\gcd(a,b)$.

But since $\gcd(a/g,b/g)=1$, you can use the extended Euclidean algorithm to find a solution $(x_0,y_0)$ to the equation $$ \frac{a}{g}x+\frac{b}{g}y=1. $$

Once you have that, the solution $(X,Y)=(\frac{c}{g}\cdot x_0,\frac{c}{g}\cdot y_0)$ is a solution to your original equation. Furthermore, the values $$ x=X + \frac{b}{g} t\quad y=Y - \frac{a}{g} t $$ give all solutions when $t$ ranges over $\mathbb{Z}$, I believe.

share|cite|improve this answer
@yuone: Yes, that gives all solutions. – Arturo Magidin Feb 6 '11 at 20:47

Here's another method. It doesn't require finding an initial solution, but it requires finding modular multiplicative inverses.

The equation $ax+by=c$ for fixed $a,b,c\in\mathbb Z$, $(a,b)\neq (0,0)$ has a solution $(x,y)\in\mathbb Z^2$ if and only if $\gcd(a,b)\mid c$.

We want to find all the solutions when $\gcd(a,b)\mid c$.

If $ab=0$, then it's trivial. Let $ab\neq 0$.

Let $a'=\frac{a}{\gcd(a,b)}$, $b'=\frac{b}{\gcd(a,b)}$, $c'=\frac{c}{\gcd(a,b)}$.

The equation is equivalent to $a'x+b'y=c'$, where $\gcd(a',b')=1$.

$$a'x\equiv c'\pmod{b'}$$

$$\iff x\equiv c'(a')^{-1}\pmod{b'}$$

$$\iff x=c'\left((a')^{-1}\bmod {b'}\right)+b'k,\, k\in\mathbb Z$$


$$y=c'\left((b')^{-1}\bmod {a'}\right)+a'm,\, m\in\mathbb Z$$

Plug these values into $a'x+b'y=c'$. You'll get:

$$k=\frac{c'-a'c'\left((a')^{-1}\bmod b'\right)-b'c'\left((b')^{-1}\bmod {a'}\right)}{a'b'}-m$$

$$x=\frac{c'-b'c'\left((b')^{-1}\bmod a'\right)}{a'}-b'm$$

$$y=c'\left((b')^{-1}\bmod a'\right)+a'm,\, m\in\mathbb Z$$

Plug these values of $x,y$ into $a'x+b'y=c'$ and you'll see that $(x,y)$ is a solution for all $m\in\mathbb Z$.

By the way, you can let $t\bmod \pm 1=0$ and $t\bmod -a=t\bmod a-a$ for all $a,t\in\mathbb Z$ (or even $t\bmod -a=t\bmod a$ or $t\bmod \pm 1=1$, which is not how WolframAlpha defines it -- it doesn't matter in this case).

It would be unwise to memorize these values of $x,y$. Remember the process and you can use the process every time to find all the solutions.

share|cite|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.