Hi,

$ hashcat.exe --example-hashes | grep keychain -A 1
TYPE: 1Password, agilekeychain
HASH: 1000:d61a54f1efdfcf57:00......

TYPE: 1Password, cloudkeychain
HASH: 9b6933f4a1f65baf02737545efc8c1c.....

Look like hashcat does not support $keychain$ hash outputs from keychain2john.py .

This file is a keepass-like for Mac OS.
Could you please add this mode ? Based on PBKDF2-SHA1 3DES.
Thanks a lot.

Sample input file : https://openwall.info/wiki/_media/john/Keychain-Samples.zip
Sample hash:password : $keychain$*10f7445c8510fa40d9ef6b4e0f8c772a9d37e449*f3d19b2a45cdcccb*8c3c3b1c7d48a24dad4ccbd4fd794ca9b0b3f1386a0a4527f3548bfe6e2f1001804b082076641bbedbc9f3a7c33c084b:passsord

$keychain$*salt*iv*ciphertext